Lucene search
+L

291 matches found

Veracode
Veracode
added 2024/04/15 12:35 p.m.26 views

Sensitive Information Disclosure

OpenTelemetry.Instrumentation.AspNetCore and OpenTelemetry.Instrumentation.Http are vulnerable to Sensitive Information Disclosure. The vulnerability is due to the url.full attribute/tag on spans Activity writing the raw query string to logs, which can potentially expose sensitive data such as En...

4.1CVSS6.7AI score0.00291EPSS
SaveExploits0References3Affected Software2
CNNVD
CNNVD
added 2024/03/09 12:00 a.m.12 views

Grandstream GXP14XX and GXP16XX Security Vulnerabilities

The Grandstream GXP14XX and Grandstream GXP16XX are both a series of IP phones from American Trend Networks Grandstream. A security vulnerability exists in the Grandstream GXP14XX version 1.0.8.9 and GXP16XX version 1.0.7.13, which originates from a vulnerability that allows a remote attacker to...

8.8CVSS7AI score0.00386EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/03/09 12:00 a.m.23 views

CVE-2023-50015

An issue was discovered in Grandstream GXP14XX 1.0.8.9 and GXP16XX 1.0.7.13, allows remote attackers to escalate privileges via incorrect access control using an end-user session-identity token...

7.3AI score0.00386EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/08 12:00 a.m.12 views

PT-2024-13846 · Grandstream · Grandstream Gxp16Xx +1

Name of the Vulnerable Software and Affected Versions: Grandstream GXP14XX version 1.0.8.9 Grandstream GXP16XX version 1.0.7.13 Description: An issue was discovered that allows remote attackers to escalate privileges via incorrect access control using an end-user session-identity token...

8.8CVSS7.4AI score0.00386EPSS
SaveExploits0References6
CNVD
CNVD
added 2024/02/22 12:00 a.m.85 views

IBM Trusteer Code Issue Vulnerability

IBM Trusteer is a suite of security solutions from International Business Machines IBM focused on providing security tools for cybercrime prevention and end-user protection. IBM Trusteer has a code issue vulnerability that stems from the presence of certain undisclosed issues that could allow fil...

9.8CVSS6.9AI score0.0046EPSS
SaveExploits0References1
Wallarm Lab
Wallarm Lab
added 2024/02/07 10:23 a.m.28 views

Digital Experience Monitoring | What Is DEM?

Introduction to Digital Experience Monitoring: Illuminating the Basics In an era governed by technology, the satisfaction of an end-user is of utmost importance. It has the power to stimulate or to halt business growth, and frequently determines if a client continues or discontinues their...

7.2AI score
SaveExploits0
NVD
NVD
added 2023/12/25 7:15 a.m.18 views

CVE-2023-47247

In SysAid On-Premise before 23.3.34, there is an edge case in which an end user is able to delete a Knowledge Base article, aka bug 15102...

4.3CVSS0.00331EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/12/25 12:00 a.m.17 views

PT-2023-30389 · Sysaid · Sysaid On-Premise

Name of the Vulnerable Software and Affected Versions: SysAid On-Premise versions prior to 23.3.34 Description: The issue allows an end user to delete a Knowledge Base article under certain conditions. Recommendations: For versions prior to 23.3.34, update to version 23.3.34 or later to resolve t...

4.3CVSS4.6AI score0.00331EPSS
SaveExploits0References6
Prion
Prion
added 2023/12/11 2:15 p.m.18 views

Cross site request forgery (csrf)

A vulnerability has been discovered on OJS, that consists in a CSRF Cross-Site Request Forgery attack that forces an end user to execute unwanted actions on a web application in which they're currently authenticated...

6.8CVSS7.4AI score0.00234EPSS
SaveExploits0References1Affected Software1
SUSE CVE
SUSE CVE
added 2023/11/25 2:04 a.m.9 views

SUSE CVE-2023-46671

An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error. Elastic has released Kibana 8.11.1 which resolves this issue. The error message recorded in the log may contain account credentials for the kibanasystem user, API Keys, and...

8CVSS6.7AI score0.00656EPSS
SaveExploits0References3
Prion
Prion
added 2023/11/24 5:15 p.m.33 views

Server side request forgery (ssrf)

google-translate-api-browser is an npm package which interfaces with the google translate web api. A Server-Side Request Forgery SSRF Vulnerability is present in applications utilizing the google-translate-api-browser package and exposing the translateOptions to the end user. An attacker can set ...

2.6CVSS6.8AI score0.00492EPSS
SaveExploits1References2Affected Software1
Elastic
Elastic
added 2023/11/14 6:38 p.m.23 views

Kibana 8.11.1 Security Update (ESA-2023-25)

Kibana Insertion of Sensitive Information into Log File ESA-2023-25 An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error. Elastic has released Kibana 8.11.1 which resolves this issue. The error message recorded in the log may...

8CVSS6.6AI score0.00656EPSS
SaveExploits0
OSV
OSV
added 2023/11/06 1:15 p.m.16 views

CVE-2023-5964

The 1E-Exchange-DisplayMessageinstruction that is part of the End-User Interaction product pack available on the 1E Exchange does not properly validate the Caption or Message parameters, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. This...

7.2CVSS6.3AI score0.00828EPSS
SaveExploits0References3
NVD
NVD
added 2023/11/06 1:15 p.m.25 views

CVE-2023-5964

The 1E-Exchange-DisplayMessageinstruction that is part of the End-User Interaction product pack available on the 1E Exchange does not properly validate the Caption or Message parameters, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. This...

9.9CVSS9.8AI score0.00828EPSS
SaveExploits0References3
Prion
Prion
added 2023/11/06 1:15 p.m.27 views

Design/Logic Flaw

The 1E-Exchange-DisplayMessageinstruction that is part of the End-User Interaction product pack available on the 1E Exchange does not properly validate the Caption or Message parameters, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. This...

5.8CVSS7.4AI score0.00828EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/06 12:27 p.m.20 views

CVE-2023-5964 1E-Exchange-DisplayMessage instruction allows for arbitrary code execution

The 1E-Exchange-DisplayMessageinstruction that is part of the End-User Interaction product pack available on the 1E Exchange does not properly validate the Caption or Message parameters, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. This...

9.9CVSS8AI score0.00828EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/11/06 12:27 p.m.32 views

CVE-2023-5964 1E-Exchange-DisplayMessage instruction allows for arbitrary code execution

The 1E-Exchange-DisplayMessageinstruction that is part of the End-User Interaction product pack available on the 1E Exchange does not properly validate the Caption or Message parameters, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. This...

9.9CVSS9.8AI score0.00828EPSS
SaveExploits0References2
CVE
CVE
added 2023/11/06 12:27 p.m.209 views

CVE-2023-5964

The CVE-2023-5964 issue affects the 1E Exchange End-User Interaction product pack, specifically the 1E-Exchange-DisplayMessage instruction. The vulnerability arises from improper validation of Caption and Message parameters, enabling arbitrary code execution with SYSTEM privileges on Windows clie...

9.9CVSS8AI score0.00828EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2023/11/06 12:00 a.m.11 views

1E Platform Security Vulnerability

1E Platform is a terminal endpoint management and automation solution from 1E. A security vulnerability exists in prior versions of 1E Platform-Exchange Product Pack-End-User Interaction 23 that stems from not properly validating the Caption or Message parameters, allowing an attacker to execute...

9.9CVSS7.7AI score0.00828EPSS
SaveExploits0References4
Citrix
Citrix
added 2023/06/16 12:00 a.m.12 views

Randomly Failure when Launching Virtual Desktop through NetScaler Gateway

Randomly, end user would report Virtual Desktop launching failure issue via NetScaler Gateway...

7.1AI score
SaveExploits0
Rows per page
Query Builder