17608 matches found
CVE-2023-46980
CVE-2023-46980 vulnerability affects Best Courier Management System v1.0. A remote attacker can execute arbitrary code and escalate privileges via a crafted script to the userID parameter. The core issue is a likely insecure handling of the userID input allowing code execution with high impact (c...
CVE-2023-31020
creationtimestamp| type| source ---|---|--- 2023-11-02 21:22:53+00:00| seen| https://t.me/cibsecurity/73471...
CVE-2023-45345
creationtimestamp| type| source ---|---|--- 2023-11-02 17:22:38+00:00| seen| https://t.me/cibsecurity/73436...
CVE-2023-45342
CVE-2023-45342 affects Online Food Ordering System v1.0 and describes multiple unauthenticated SQL injection vulnerabilities in routers/register-router.php, caused by insufficient validation of the phone parameter, which is sent unfiltered to the database. Red Hat’s advisory mirrors the descripti...
CVE-2023-3164
CVE-2023-3164 (LibTIFF) is a heap-buffer-overflow in extractImageSection() within tools/tiffcrop.c, exploitable via a crafted TIFF file to cause a denial of service. The issue affects LibTIFF 4.x and requires a local attacker with crafted TIFF input. Remediation is to upgrade to a fixed libtiff v...
CVE-2023-46352
In CVE-2023-46352, the Pixel Plus: Events + CAPI + Pixel Catalog for Facebook Module (PrestaShop Smart Modules) up to version 2.4.9 exposes a permissions flaw that lets a guest download exports, leaking personal data from the ps_customer table (name, surname, email). Root cause: lack of proper ac...
CVE-2023-39284
CVE-2023-39284 affects Insyde InsydeH2O kernel 5.0–5.5 via IhisiServicesSmm, where arbitrary SetVariable calls in the SMI handler can pass attacker-controlled parameters. Root cause: unsanitized arguments in SMI SetVariable handling, enabling modification of protected NVRAM variables from Ring0 (...
CVE-2023-42633
The CVE-2023-42633 entry concerns a vulnerability in validationtools where a missing permission check can lead to local information disclosure without requiring additional privileges. The issue is documented across multiple sources, consistently describing a local information disclosure impact du...
CVE-2023-5515
Hitachi Energy eSOMS vulnerability CVE-2023-5515: exposure of internal resource paths via certain web query parameters. Affected product: eSOMS v6.3.13 and prior. Root cause: web responses reveal internal application structure, enabling information disclosure (CWE-497). Impact: potential disclosu...
CVE-2023-5438
CVE-2023-5438 refers to the WordPress wp-image-slideshow plugin vulnerability. The issue is an SQL Injection in the plugin’s shortcode for versions up to 12.0, caused by insufficient escaping of user-supplied parameters and inadequate query preparation. The impact, as described in the sources, is...
CVE-2023-5429
CVE-2023-5429 affects the WordPress plugin Information Reel. The vulnerability is a SQL Injection via the plugin’s shortcode caused by insufficient escaping of user-supplied parameters and inadequate preparation of the SQL query. It enables authenticated attackers with subscriber-level permission...
CVE-2020-36767
creationtimestamp| type| source ---|---|--- 2023-10-30 21:19:46+00:00| seen| https://t.me/cibsecurity/73167 2023-10-30 21:20:05+00:00| seen| https://t.me/cibsecurity/73183...
CVE-2023-21383
Technical details (affected product/version/root cause/fix) for CVE-2023-21383 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2023-21348
The CVE-2023-21348 entry concerns Android Window Manager side-channel leakage that allows an app to be detected as installed without query permissions, causing local information disclosure. Connected sources corroborate the issue as an information-disclosure vulnerability (Framework category) wit...
CVE-2023-21325
Technical details about CVE-2023-21325 are not publicly available in the provided connected documents. No concrete information on affected products, versions, or fixes is present. Monitor for updates.