14162 matches found
CVE-2023-51428
Technical details about CVE-2023-51428 (affected products, vulnerable components, root cause, impact, fixes) are not publicly provided in the connected documents. Monitor for updates from vendors and security advisories.
CVE-2023-23439
CVE-2023-23439 relates to an information disclosure vulnerability affecting some Honor devices. Connected sources identify at least the Honor LGE-AN00 (Honor Magic 4) as impacted, with exploitation potentially leading to leakage of confidential data. The available documents do not provide detaile...
Novel-Plus Cross-Site Scripting Vulnerability
Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. A cross-site scripting vulnerability exists in Novel-Plus 4.2.0 and earlier versions, which stems from the parameter nickName in the file /user/updateUserInfo that causes cross-site scripting...
PT-2023-18620 · Unknown · Anders Thorborg
Name of the Vulnerable Software and Affected Versions: Anders Thorborg versions 1.4.12 and earlier Description: The issue is related to a Missing Authorization vulnerability in Anders Thorborg. This vulnerability allows unauthorized access. Recommendations: For versions 1.4.12 and earlier, update...
PT-2023-18945 · Huawei · Honor
Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to an information leak, where successful exploitation could cause the leak of information. There is no information provided about the estimated number of...
Tenda M3 fromSetLocalVlanInfo function stack buffer overflow vulnerability
Tenda M3 is a wireless controller AC from Tenda for centralized management of multiple wireless access points in scenarios such as hotel chains, low-star hotels and small and medium-sized businesses. The Tenda M3 suffers from a stack buffer overflow vulnerability, which stems from the failure of...
PT-2023-18950 · Huawei · Honor
Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to an out of bounds read vulnerability. Successful exploitation of this vulnerability could cause an information leak. Recommendations: At the moment, there is n...
CVE-2023-51101
Tenda W9 V1.0.0.74456CN was discovered to contain a stack overflow via the function formSetUplinkInfo...
CVE-2023-51093
Tenda M3 V1.0.0.124856 was discovered to contain a stack overflow via the function fromSetLocalVlanInfo...
CVE-2023-51098
Tenda W9 V1.0.0.74456CN was discovered to contain a command injection vulnerability via the function formSetDiagnoseInfo...
CVE-2023-51100
Tenda W9 V1.0.0.74456CN was discovered to contain a command injection vulnerability via the function formGetDiagnoseInfo...
CVE-2023-51093
Tenda M3 V1.0.0.124856 was discovered to contain a stack overflow via the function fromSetLocalVlanInfo...
PT-2023-8326 · Tenda · Tenda M3
Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.124856 Description: The issue is related to a stack overflow via the fromSetLocalVlanInfo function, which can allow a remote attacker to execute arbitrary code by exploiting a buffer overflow in memory. Recommendations:...
PT-2023-31764 · Tenda · Tenda W9
Name of the Vulnerable Software and Affected Versions: Tenda W9 version 1.0.0.74456 CN Description: A command injection issue was discovered via the formGetDiagnoseInfo function. Recommendations: For Tenda W9 version 1.0.0.74456 CN, consider disabling the formGetDiagnoseInfo function until a patc...
CVE-2023-7094 Netentsec NS-ASG Application Security Gateway nsasg6.0.tgz information disclosure
A vulnerability classified as problematic was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected by this vulnerability is an unknown functionality of the file /protocol/nsasg6.0.tgz. The manipulation leads to information disclosure. The attack can be launched remotely. The explo...
CVE-2023-7094
CVE-2023-7094 affects Netentsec NS-ASG Application Security Gateway 6.3. The vulnerability is an information-disclosure in an unknown functionality of the file /protocol/nsasg6.0.tgz, exploitable remotely. Public exploit details exist; multiple sources corroborate the issue and the affected compo...
PT-2023-31416 · Beyondtrust · Beyondtrust Privilege Management For Windows
Name of the Vulnerable Software and Affected Versions: BeyondTrust Privilege Management for Windows versions prior to 2023-07-14 Description: The Challenge Response feature allows local administrators to bypass it by decrypting the shared key or locating the decrypted shared key in process memory...
info-tabac.ca Cross Site Scripting vulnerability OBB-3820755
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SUSE CVE-2023-51592
BlueZ Audio Profile AVRCP parsemediafolder Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability i...
