17608 matches found
CVE-2023-38848
CVE-2023-38848 affects rmc R Beauty CLINIC Line v13.6.1. A remote attacker can obtain sensitive information via a crafted GET request, per multiple sources. Impact is information disclosure; no exploitation details provided in the documents. Affected component: the Line client/software; root caus...
CVE-2023-39739
CVE-2023-39739 affects REGINA SWEETS&BAKERY Line, version 13.6.1. The root cause described across connected sources is leakage of the client secret, which allows an attacker to obtain the channel access token and send crafted broadcast messages. Documents do not specify a vendor patch or remediat...
CVE-2023-46288
CVE-2023-46288 affects Apache Airflow (versions 2.4.0–2.7.0) where sensitive configuration data could be read by authenticated users via the REST API when expose_config allows non-sensitive values. The issue is due to configuration exposure even when expose_config is set to non-sensitive-only; ve...
CVE-2023-5292
The CVE-2023-5292 entry concerns the WordPress plugin Advanced Custom Fields: Extended, with stored XSS via the acfe_form shortcode in versions up to and including 0.8.9.3. The issue results from insufficient input sanitization and output escaping on user-supplied attributes, enabling authenticat...
CVE-2023-5414
CVE-2023-5414 : Icegram Express (WordPress)
CVE-2023-42666
DexGate (DEXGate device from DEXMA) is affected by CVE-2023-42666, an exposure of sensitive information to an unauthorized actor vulnerability that can enable crafting malicious requests to obtain the web server version information. Public documentation in the connected sources identifies the aff...
mooSocial Cross-Site Scripting Vulnerability
mooSocial is a multi-platform, mobile-ready, user-friendly script from mooSocial, Inc. for building community-driven content sharing and social networking sites. A cross-site scripting vulnerability exists in mooSocial version 3.1.8, which stems from the application's lack of effective filtering...
CVE-2023-44690
Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive information via /mycli/config.py...
ROS-20231018-01
Vulnerability in the QDecCoordOnUnitSphere function of the GPAC multimedia platform is related to integer . overflow . Exploitation of the vulnerability could allow an intruder to gain unauthorized access to the protected information...
Updated MATA attacks industrial companies in Eastern Europe
In early September 2022, we discovered several new malware samples belonging to the MATA cluster. As we were collecting and analyzing the relevant telemetry data, we realized the campaign had been launched in mid-August 2022 and targeted over a dozen corporations in Eastern Europe from the oil an...
CVE-2023-45008
CVE-2023-45008 affects the WPJohnny Comment Reply Email plugin for WordPress (versions ≤ 1.0.3). The vulnerability is an authenticated (admin+) Stored Cross-Site Scripting (XSS) flaw arising from insufficient input validation/escaping in the plugin, enabling an admin or higher-privileged user to ...
CVE-2023-38545
CVE-2023-38545 is a heap-based buffer overflow in curl/libcurl during SOCKS5 proxy hostname handling. When a long host name (over 255 bytes) is passed for proxy resolution, curl may copy the full hostname into the target buffer due to a race in a slow handshake, enabling arbitrary code execution....
CVE-2023-45383
CVE-2023-45383 affects the SoNice etiquetage module for PrestaShop up to version 2.5.9. A guest can perform a path traversal due to insufficient permissions checks and flawed pathname construction, enabling viewing/downloading of personal information across the information system. The Red Hat/NVD...
CVE-2023-22128
...
CVE-2023-22125
...
CVE-2023-22123
...
CVE-2023-22122
...