17612 matches found
Moxa NPort Plain Text Storage of Passwords (CVE-2016-9348)
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPor...
Moxa NPort Improper Restriction of Excessive Authentication Attempts (CVE-2016-9366)
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPor...
CVE-2023-31426
The CVE-2023-31426 issue affects Brocade Fabric OS where the commands configupload and configdownload, on certain older Fabric OS versions, print scp, sftp, and ftp server passwords in the supportsave data. Root cause is exposure of passwords in supportsave output when using those commands prior ...
CVE-2023-4026
Rejected reason: REJECT DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4024. Reason: This record is a duplicate of CVE-2023-4024. Notes: All CVE users should reference CVE-2023-4024 instead of this record. All references and descriptions in this record have been removed to prevent accidental...
CVE-2023-3345
CVE-2023-3345 affects the LMS by Masteriyo WordPress plugin prior to 1.6.8. The plugin’s REST API endpoints lack proper authorization, enabling any student to retrieve other students’ email addresses (information disclosure). Root cause per connected details: insufficient access checks on REST ro...
CVE-2023-34360
ASUS RT-AX88U is affected by a stored XSS in the Custom User Icons feature. The vulnerability arises from insufficient input validation/escaping, enabling an attacker who logs in with regular user privileges to upload an image containing JavaScript to trigger a stored XSS. Affected firmware versi...
Moderate: samba security and bug fix update
Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fixes: samba: SMB2 packet signing is not enforced when "server...
Design/Logic Flaw
Discourse is an open source discussion platform. Prior to version 3.0.6 of the stable branch and version 3.1.0.beta7 of the beta and tests-passed branches, information about restricted-visibility topic tags could be obtained by unauthorized users. The issue is patched in version 3.0.6 of the stab...
CVE-2023-38685
Discourse is affected in versions prior to stable 3.0.6 and beta/tests-passed 3.1.0.beta7, where information about restricted-visibility topic tags could be obtained by unauthorized users. The issue is fixed in stable 3.0.6 and beta/tests-passed 3.1.0.beta7. Impact: potential information disclosu...
CVE-2023-38599
CVE-2023-38599 is a logic-state-management issue in WebKitGTK/WebKit components where a website may track sensitive user information. The vulnerability is addressed by updates in WebKitGTK (notably 2.40.5 series) across distributions (e.g., Debian DSA-5468-1 notes fixes for WebKitGTK with this CV...
CVE-2023-38509
CVE-2023-38509 affects XWiki Platform’s livetable-ui component (org.xwiki.platform:xwiki-platform-livetable-ui). Versions 3.5-milestone-1 through but not including 14.10.9 and 15.3-rc-1 expose a mail obfuscation configuration that was not fully applied, allowing obfuscated emails to be accessed. ...
CVE-2023-32416
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5, watchOS 9.6. An app may be able to read sensitive location information...
CVE-2023-38133
CVE-2023-38133 affects WebKit/WebKitGTK components and is documented across multiple advisories. The issue involves processing web content that may disclose sensitive information. Fixes are implemented in Apple platforms (iOS 15.7.8 / 16.6, iPadOS 15.7.8 / 16.6, tvOS 16.6, watchOS 9.6, macOS Vent...
CVE-2023-38671
creationtimestamp| type| source ---|---|--- 2023-07-26 14:27:36+00:00| seen| https://t.me/cibsecurity/67298...
Design/Logic Flaw
Jenkins Chef Identity Plugin 2.0.3 and earlier does not mask the user.pem key form field, increasing the potential for attackers to observe and capture it...
CVE-2019-15287
creationtimestamp| type| source ---|---|--- 2023-07-26 12:26:35+00:00| seen| https://t.me/cibsecurity/14843...
THIS IS A TEST
Lines of code L1 Vulnerability details TESTING REFACTOR Assessed type Context --- The text was updated successfully, but these errors were encountered: All reactions...
Design/Logic Flaw
RTX TRAP v1.0 was discovered to be vulnerable to host header poisoning...
CVE-2023-34093
Strapi (open-source CMS) prior to version 4.10.8 is vulnerable to information disclosure due to improper handling of Content-Type attributes. The issue arises from the removal of the privateAttributes getter when users extend or modify content-types, which can cause any attribute to become public...