17606 matches found
CVE-2024-26138
The CVE concerns the XWiki licensor application, where the Licenses.Code.LicenseJSON document is publicly accessible and exposes admins’ license information, including the instance ID and license owner’s name and email. This data exposure could enable correlation of active installations and targe...
samsmeats.us Cross Site Scripting vulnerability OBB-3855840
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-6787
A flaw was found in Keycloak that occurs from an error in the re-authentication mechanism within org.keycloak.authentication. This flaw allows hijacking an active Keycloak session by triggering a new authentication process with the query parameter "prompt=login," prompting the user to re-enter...
CVE-2023-42946
CVE-2023-42946: Apple platform information-disclosure issue where an app may leak sensitive user data. Affected products include tvOS 17.1, watchOS 10.1, macOS Sonoma 14.1, iOS 17.1, and iPadOS 17.1. Root cause described as improved redaction of sensitive information; public details consistently ...
CVE-2023-42952
CVE-2023-42952 affects Apple platforms (iOS, iPadOS, macOS) where an app with root privileges may access private information. The issue is addressed with improved checks and is fixed in iOS/iPadOS 17.1, macOS Ventura 13.6.3, macOS Sonoma 14.1, and macOS Monterey 12.7.1. Connected sources also ref...
CVE-2024-1675
Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2019-15451
creationtimestamp| type| source ---|---|--- 2024-02-20 10:46:36+00:00| seen| https://t.me/ctinow/188335...
CVE-2019-15421
creationtimestamp| type| source ---|---|--- 2024-02-20 09:41:21+00:00| seen| https://t.me/ctinow/188257...
CVE-2024-25198
CVE-2024-25198 affects Open Robotics ROS 2 and Nav2 humble. The issue is an incorrect pointer order in amcl_node.cpp: laser_scan_filter_.reset() is called before tf_listener_.reset(), causing a use-after-free. Connected documents point to the Nav2/amcl changes and related GitHub PRs (e.g., naviga...
CVE-2024-23758
The vulnerability CVE-2024-23758 affects Unisys Stealth 5.3.062.0, where an issue allows attackers to view sensitive information via the Enterprise ManagementInstaller_msi.log file. The Red Hat, NVD, and other sources corroborate the same description across multiple feeds, but the technical detai...
HPESBMU04599 rev.1 - HPE IceWall products, Remote Disclosure of Information
Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE IceWall Federation - 4.0 RHEL 8 and Windows - SAML IdP, Office 365 module, OIDC RP and OIDC OP. IceWall Gen11 Password Reset Option - 11.0 RHEL 8 and Windows IceWall...
CVE-2024-1633
CVE-2024-1633 is a bootloader issue in bl2 where reading image length/destination from each image certificate uses a 32-bit unsigned value, causing an integer overflow. This can bypass memory range checks and write data outside buffers, potentially bypassing secure boot. Affected component: bl2 (...
CVE-2023-6749
CVE-2023-6749 affects Zephyr RTOS, specifically the libzephyr.so component and its Settings Shell handling of SETTINGS_VALUE_STRING values. The root cause is unchecked length from user input, which can lead to a buffer overflow and possible Denial of Service as described in Veracode’s entry. The ...
CVE-2024-1512
The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to union based SQL Injection via the 'user' parameter of the /lms/stm-lms/order/items REST route in all versions up to, and including, 3.2.5 due to insufficient escaping on the user supplied...
CVE-2024-20982
...
CVE-2024-20980
...
CVE-2024-20978
...
CVE-2024-20980
...