Design/Logic Flaw

Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion LFI vulnerability in a special URL. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary PHP file with .asp file extension under specific system paths, to access and modify...

CVE-2023-48382

The CVE-2023-48382 entry concerns Softnext Mail SQR Expert with a Local File Inclusion (LFI) vulnerability in a mail delivery URL. An unauthenticated attacker can exploit this to execute arbitrary PHP files with a .asp extension in certain system paths and access/modify partial system information...

CVE-2023-49347

Temporary data passed between application components by Budgie Extras Windows Previews could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may read private information from windows, present false...

CVE-2023-49343

Concrete details exist: CVE-2023-49343 affects Budgie Extras components (notably the budgie-app-launcher-applet/Dropby applet). It describes temporary data passed between application components stored in a location accessible to local users, enabling a local attacker to view or manipulate the dat...

CVE-2023-49342

Temporary data passed between application components by Budgie Extras Clockworks applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false...

Liberapay: Avatar URL is exposed in patron export for secret donations

The avatar URL was exposed in the patron export for secret donations, which could potentially identify donors who wished to remain anonymous...

tcshare.com Improper Access Control vulnerability OBB-3813691

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-49152

CVE-2023-49152 affects Labs64 WordPress Credit Tracker (Credit Tracker plugin) up to version 1.1.17. Root cause: improper neutralization of input during web page generation, enabling Stored XSS. Impact: stored cross-site scripting could affect users accessing injected content; CVSS v3.1 base scor...

CVE-2023-6595

CVE-2023-6595 affects Progress WhatsUp Gold versions released before 2023.1. The issue is an API endpoint that lacks authentication, allowing an unauthenticated attacker to enumerate ancillary credential information stored within WhatsUp Gold. Red Hat and Nessus/NASL reports corroborate the core ...

CVE-2023-6569 External Control of File Name or Path in h2oai/h2o-3

External Control of File Name or Path in h2oai/h2o-3...

CVE-2023-25650

CVE-2023-25650 affects ZTE ZXCLOUD iRAI, where the backend fails to escape special strings or restrict paths in the download interface, enabling an attacker with user permissions to modify a request parameter and trigger arbitrary file downloads. The vulnerability is rooted in improper input hand...

CVE-2023-50459

CVE-2023-50459 corresponds to a Broken Access Control issue in the TYPO3 extension femanager (in2code). The connected advisories identify the vulnerable components as the check_edit_user component (improper access checks) and a missing backend access check, enabling an authenticated frontend user...

CVE-2023-43585

CVE-2023-43585 corresponds to Zoom components on iOS: Zoom Mobile App for iOS and Zoom SDKs for iOS prior to version 5.16.5. The root cause is improper access control that may allow an authenticated user to disclose information via network access. Affected products include Zoom Mobile App for iOS...

CVE-2023-6789

CVE-2023-6789 is a stored XSS vulnerability in Palo Alto Networks PAN-OS web interface. An authenticated read‑write administrator can store a JavaScript payload, which executes in the context of another authenticated administrator, disguising actions as those of the unsuspecting user. The issue i...

Our Top Takeaways from 2023 Gartner® Market Guide for Microsegmentation

...

Authorization

An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error or in the event where debug level logging is enabled in Kibana. Elastic has released Kibana 8.11.2 which resolves this issue. The messages recorded in the log may contain Accou...

CVE-2023-46675

CVE-2023-46675 affects Elastic Kibana and describes an information-disclosure risk where sensitive data may be written to Kibana logs during errors or when debug logging is enabled. Affected ranges include Kibana 7.13.0–7.17.16 and 8.0.0–8.11.1. Log entries could contain credentials for kibana_sy...

CVE-2023-45800

The CVE-2023-45800 entry describes an SQL Injection in Hanbiro groupware due to improper neutralization of special elements. Affected versions are Hanbiro groupware v3.8.79 up to (but not including) v3.8.81.1. The vulnerability could allow information elicitation with a high confidentiality impac...

Elastic Beats inserts sensitive information into log file

An issue was discovered by Elastic whereby Beats and Elastic Agent would log a raw event in its own logs at the WARN or ERROR level if ingesting that event to Elasticsearch failed with any 4xx HTTP status code except 409 or 429. Depending on the nature of the event that Beats or Elastic Agent...

CVE-2023-6687

CVE-2023-6687 affects Elastic Beat/Elastic Agent and related components. When ingestion to Elasticsearch fails with any 4xx HTTP status except 409 or 429, the agent logs the raw event at WARN/ERROR, potentially exposing sensitive information in the logs. The issue is mitigated by upgrading to ver...