17612 matches found
CVE-2023-3643
creationtimestamp| type| source ---|---|--- 2023-07-12 22:25:46+00:00| seen| https://t.me/cibsecurity/66602 2026-03-03 10:01:07+00:00| seen| https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mg5j65cbdr2v 2026-03-03 10:06:05+00:00| seen|...
ausstellung.de.doew.at Cross Site Scripting vulnerability OBB-3509505
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-37952
CVE-2023-37952 affects Jenkins mabl Plugin versions 0.0.46 and earlier. The root cause is missing permission checks on several HTTP endpoints, allowing CSRF by attackers who can cause the plugin to connect to an attacker-specified URL using attacker-specified credentials IDs, thereby exposing cre...
CVE-2023-33902
In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
Information disclosure
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2023-33902
CVE-2023-33902 affects UNISOC Bluetooth service across multiple chipsets (e.g., SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T618/T612/T616/T770/T820/S8000). The root cause is a missing permission check in the Bluetooth service, enabling local information disclosure without additional execution pr...
CVE-2023-33881
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2023-32789
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2023-30937
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2023-34117
Summary: CVE-2023-34117 describes a relative path traversal in the Zoom Client SDK prior to 5.15.0, enabling an unauthorized local user to disclose information via local access. Affected software: Zoom Client SDK (pre-5.15.0). Root cause: relative path traversal in the SDK. Impact: information di...
Security Bulletin: IBM Sterling Connect:Express uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Summary IBM Sterling Connect:Express uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Vulnerability Details CVEID:CVE-2021-38933 DESCRIPTION: IBM Sterling Connect:Direct uses weaker than expected cryptographic algorithms that...
CVE-2023-36919
The CVE-2023-36919 issue affects SAP Enable Now products: WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704. The underlying root cause is the lack of an implemented Referrer-Policy header, leading to information disclosure by exposing referrer details to unauthe...
CVE-2023-36918
CVE-2023-36918 affects SAP Enable Now components WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10 and ENABLE_NOW_CONSUMP_DEL 1704. The root cause is absence of the X-Content-Type-Options response header, enabling MIME type sniffing and leading to Cross-Site Scripting that could disclose or...
KLA50774 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, bypass security restrictions, gain privileges, spoof user interface. Below is a complete list of...
Rukovoditel Project Management CRM 2.4.1 Local File Inclusion
==================================================================================================================================== | Title : Rukovoditel Project Management CRM 2.4.1 LFI Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...
PT-2023-5386 · D Link · Di-7200Gv2.E1
Name of the Vulnerable Software and Affected Versions: D-Link device DI-7200GV2.E1 version 21.04.09E1 Description: The issue is related to a stack overflow in the qos ext.asp function when handling the hi up parameter. This can allow a remote attacker to impact the confidentiality, integrity, and...
PT-2023-5385 · D Link · Di-7200Gv2.E1
Name of the Vulnerable Software and Affected Versions: D-Link device DI-7200GV2.E1 version 21.04.09E1 Description: The issue is related to a stack overflow in the yyxz.data function when processing the id parameter, potentially allowing a remote attacker to impact the confidentiality, integrity,...
CVE-2023-3553
The CVE-2023-3553 exposure affects TeamPass prior to version 3.0.10. Descriptions across multiple connected entities indicate that unauthenticated actors can view endpoint directory listings, leading to disclosure of application-specific and user data. The root cause is improper directory listing...
