CVE-2023-1541 Business Logic Errors in answerdev/answer

Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...

CVE-2023-1542 Business Logic Errors in answerdev/answer

Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...

CVE-2023-1542 Business Logic Errors in answerdev/answer

Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...

CVE-2023-1542 Business Logic Errors in answerdev/answer

Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...

CVE-2023-1541: Undefined Security Weakness

Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...

CVE-2023-1541 Business Logic Errors in answerdev/answer

Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...

CVE-2023-1542

CVE-2023-1542 concerns business logic errors in the open-source project answerdev/answer prior to version 1.0.6 . Connected sources confirm the affected component and version range and provide a remediation: upgrade to 1.0.6 or later . The issue is described consistently across Red Hat/OSV and ot...

PT-2023-17062 · Answerdev · Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.6 Description: The issue concerns Business Logic Errors in the GitHub repository answerdev/answer. Recommendations: For versions prior to 1.0.6, update to version 1.0.6 or later to resolve the issue...

Adobe Connect 11.4.5 / 12.1.5 Local File Disclosure Vulnerability

Adobe Connect versions 11.4.5 and below as well as versions 12.1.5 and below suffer from a file disclosure vulnerability. Title: adobe connect - Local File Disclosure / Download security feature bypass vulnerability Author: h4shur CVE: CVE-2023-22232 Vendor Homepage: https://www.adobe.com Softwar...

Upgraded Q -> 3 from #197 [1678982150949]

Judge has assessed an item in Issue 197 as 3 risk. The relevant finding follows: L-02 Instant reward calculation --- The text was updated successfully, but these errors were encountered: All reactions...

Audit Findings for BYTES Token Contract - Burn Function Vulnerabilities

Lines of code Vulnerability details Impact BYTES2.burn: The function burn allows authorized callers to burn BYTES tokens from a specific address and mint DAO taxes. However, the function does not check if the from address actually has enough BYTES tokens to burn. This means that an attacker could...

Linux driver Bluetooth DoS

The vulnerability in the drivers/bluetooth/hciqca.c file of the Linux operating system is related to pointer assignment errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Google Chrome V8 Engine Code Execution

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page...

Adobe Photoshop Multiple RCE Vulnerabilities (APSB23-11) - Mac OS X

Adobe Photoshop is prone to multiple remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Photoshop Multiple RCE Vulnerabilities (APSB23-11) - Windows

Adobe Photoshop is prone to multiple remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2023-1748 · Microsoft · Windows Point-To-Point Protocol Over Ethernet +1

Name of the Vulnerable Software and Affected Versions: Windows Point-to-Point Protocol over Ethernet PPPoE affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Windows Point-to-Point Protocol PPP implementation. This allows...

ABB Symphony Plus S+ HMI Privilege Escalation

The vulnerability of the HMI software platform for control and monitoring of ABB Symphony Plus S+ Operations is related to errors during the authentication process. Exploiting this vulnerability can allow attackers who operate remotely to gain increased privileges...

SiPass IP access Command-Line Interface Code Execution

The vulnerability of the command-line interface of SiPass IP access integrated controllers is related to errors in processing input data. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the root user...

PT-2023-1767 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to errors in the representation of information by the user interface. It allows a remote attacker to conduct spoofing attacks, affecting the system...

PT-2023-1779 · Microsoft · Defender

Name of the Vulnerable Software and Affected Versions: Microsoft Defender affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Microsoft Defender. It is caused by synchronization errors when using a shared resource in the Microsoft Malwar...