4604 matches found
Remote file inclusion
A local file inclusion vulnerability has been found in WPN-XM Serverstack affecting version 0.8.6, which would allow an unauthenticated user to perform a local file inclusion LFI via the /tools/webinterface/index.php?page parameter by sending a GET request. This vulnerability could lead to the...
CVE-2023-46236
FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to version 1.5.10, a server-side-request-forgery SSRF vulnerability allowed an unauthenticated user to trigger a GET request as the server to an arbitrary endpoint and URL scheme. This also allows remote...
CVE-2023-38846
An issue in Marbre Lapin Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...
CVE-2023-38849
An issue in tire-sales Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...
CVE-2023-38845
An issue in Anglaise Company Anglaise.Company v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...
CVE-2023-38845
An issue in Anglaise Company Anglaise.Company v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...
CVE-2023-38846
An issue in Marbre Lapin Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...
CVE-2023-38848
An issue in rmc R Beauty CLINIC Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...
CVE-2023-38849
An issue in tire-sales Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...
CVE-2023-38847
An issue in CHRISTINA JAPAN Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...
Cross site request forgery (csrf)
An issue in tire-sales Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...
Cross site request forgery (csrf)
An issue in rmc R Beauty CLINIC Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...
Cross site request forgery (csrf)
An issue in Marbre Lapin Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...
Cross site request forgery (csrf)
An issue in Anglaise Company Anglaise.Company v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...
PT-2023-26626 · Unknown · Marbre Lapin Line
Name of the Vulnerable Software and Affected Versions: Marbre Lapin Line version 13.6.1 Description: The issue allows a remote attacker to obtain sensitive information via a crafted GET request. Recommendations: For Marbre Lapin Line version 13.6.1, consider restricting access to sensitive...
CVE-2023-38848
An issue in rmc R Beauty CLINIC Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...
Line Security Breach
Line is an instant messaging platform from Line Inc. Line suffers from a security vulnerability that originates in the applet tire-sales Line version v.13.6.1 which allows remote attackers to obtain sensitive information via a crafted GET request...
CVE-2023-38847
The CVE-2023-38847 vulnerability affects CHRISTINA JAPAN Line v13.6.1. A remote attacker can access sensitive information by sending a crafted GET request, with network as the attack vector and no user interaction required. The issue yields Confidentiality impact (C) High, per CVSS metrics (AV:N/...
