Information disclosure

IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain system information using a specially crafted query that could aid in further attacks against the system. IBM X-Force ID: 257695...

PT-2023-25343 · Mattermost · Mattermost Boards

Name of the Vulnerable Software and Affected Versions: Mattermost Boards affected versions not specified Description: The issue is related to the improper validation of a board link in Mattermost Boards, which allows an attacker to crash a channel by posting a specially crafted boards link...

PT-2023-26082 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda F1202 version V1.0BR V1.2.0.20408 Tenda FH1202 version V1.2.0.19 EN Description: A stack overflow was discovered in the page parameter in the fromSafeMacFilter function. This issue affects the specified versions of Tenda F1202 and FH120...

guide2.info Cross Site Scripting vulnerability OBB-3511573

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Bazaar Social Listing Shopping Web PHP Template 2.3.2 Privilege Escalation

==================================================================================================================================== | Title : Bazaar | Social Listing Shopping Web PHP Template v2.3.2 Privilege Escalation Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.P...

D–Link DIR-823G HNAP1 Protocol DoS

The vulnerability of the HNAP1 protocol implementation in the microprogrammed software for D–Link DIR-823G routers is related to the escape operation from the buffer boundaries in memory when processing the SetParentsControlInfo parameter. Exploiting this vulnerability allows a remote attacker to...

CVE-2023-33900

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

Information disclosure

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

Information disclosure

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

Information disclosure

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

Information disclosure

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

Information disclosure

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-33892

In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-33881

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-32788

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-33898

CVE-2023-33898 concerns a vulnerability in the telephony service where a missing permission check can lead to local information disclosure without requiring privileges or user interaction. Multiple sources (NVD, Red Hat advisory, CVE listing, and related ecosystem data) describe it as a local dis...

CVE-2023-30937

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-30937

CVE-2023-30937 describes a missing permission check in the telephony service that could allow local information disclosure with no extra privileges. Documents confirm this flaw affects the telephony component (noted in Red Hat/NVD records) and is associated with UNISOC chipsets/telephony implemen...

CVE-2023-30926

In opm service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-30924

CVE-2023-30924 involves a missing permission check in the messaging service, enabling local information disclosure without extra execution privileges. The NVD entry assigns CVSS v3.1 base score 5.5 (Local, Low attack complexity, Privileges Required: Low, Confidentiality Impact: High) and notes it...