14535 matches found
CVE-2023-39827
Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the ruleinfo parameter in the formAddMacfilterRule function...
CVE-2023-21292
CVE-2023-21292 affects Android’s ActivityManagerService.openContentUri, where a confused deputy could allow a third-party app to access restricted files and disclose information locally without extra execution privileges and with no user interaction. The vulnerability is described in Android’s CV...
CVE-2023-21276
CVE-2023-21276 affects Google Android: information disclosure via writeToParcel in CursorWindow.cpp caused by uninitialized data. This enables local information disclosure with no extra privileges and no user interaction required. The provided documents state the issue, its root cause, and impact...
guide2.info Cross Site Scripting vulnerability OBB-3579305
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2023-27124
Name of the Vulnerable Software and Affected Versions Tenda A18 version 15.13.07.09 Description A stack overflow issue was discovered in the formAddMacfilterRule function via the rule info parameter. Recommendations For Tenda A18 version 15.13.07.09, consider disabling the formAddMacfilterRule...
Tenda A18 Buffer Error Vulnerability
Tenda A18 is an AC1200 dual-band Wi-Fi repeater from Tenda, China. A security vulnerability exists in Tenda A18 version V15.13.07.09, which originates from a stack overflow vulnerability in the parameter ruleinfo of the function formAddMacfilterRule...
CVE-2023-22444
The CVE CVE-2023-22444 affects Intel® NUC BIOS firmware across multiple models (e.g., 13 Extreme Compute Element/Kit, 11 Performance Kit/Mini PC, Compute Element, Laptop Kit, Pro Kit/Board/Mini PC). The underlying issue is improper initialization in the BIOS firmware, which may allow a privileged...
GHSA-VMCH-3W2X-VHGQ .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2023-38180: .NET Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core 2.1, .NET 6.0, and .NET 7.0. This advisory also provides guidance on what developers can do...
CVE-2023-4242
The FULL - Customer plugin for WordPress is vulnerable to Information Disclosure via the /health REST route in versions up to, and including, 2.2.3 due to improper authorization. This allows authenticated attackers with subscriber-level permissions and above to obtain sensitive information about...
PT-2023-35943 · Git +1 · Pcre2
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow WRITE 4 crash type. The crash state involves functions such as get grouplength and get branchlength. No...
CVE-2023-35381
Windows Fax Service Remote Code Execution Vulnerability...
CVE-2023-36907
Technical details about CVE-2023-36907 are not publicly available in the provided documents; no affected products, root cause, impact, or fixes are described here. Monitor official updates from NVD/Microsoft for remediation.
Description of the security update for Office 2016: August 8, 2023 (KB5002465)
Description of the security update for Office 2016: August 8, 2023 KB5002465 Applies To Office Standard 2016 Office Professional 2016 Office Professional Plus 2016 Office Home and Business 2016 Office Home and Student 2016 Summary This security update for Microsoft Office provides defense-in-dept...
PT-2023-21824 · Qualcomm · Sd205 Firmware +58
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue arises from the cam get device priv function not checking the type of handle being returned, which can be a device, session, or link handle...
PT-2023-4215 · Sap · Sap Host Agent
Name of the Vulnerable Software and Affected Versions: SAP Host Agent version 7.22 Description: The issue is related to a missing authentication check in the SAP Host Agent, allowing an unauthenticated attacker to set an undocumented parameter to a particular compatibility value. This enables the...
PT-2023-25730 · Microsoft · Azure Devops Server
Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Description: The issue is related to a spoofing vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-wor...
CVE-2023-20818
In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07460540; Issue ID: ALPS07460540...
Out-of-bounds
In pda, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07147572; Issue ID: ALPS07421076...
CVE-2023-20812
In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07944987; Issue ID: ALPS07944987...