17614 matches found
CVE-2023-32550
The CVE-2023-32550 issue affects Landscape: Landscape’s server-status page exposes sensitive system information via GET requests, enabling leakage that could assist further attacks on the Landscape API. According to the sources, this data exposure is the primary vulnerability, with CVSS scores in...
CVE-2023-21632
CVE-2023-21632 concerns a memory corruption flaw in the Automotive GPU when querying a gsl memory node. The vulnerability targets the Automotive GPU component and is described across multiple sources as memory corruption, with no publicly provided fixed version or patch details in the connected d...
CVE-2022-40523
CVE-2022-40523 describes information disclosure in the Kernel caused by indirect branch misprediction. The connected records corroborate a kernel‑level information leakage issue; Red Hat and NVD entries simply state the kernel disclosure, with no vendor/version specifics provided in these documen...
CVE-2022-48439
The CVE-2022-48439 entry concerns the cp_dump driver, where a missing bounds check enables an out-of-bounds write. This can lead to a local denial of service with SYSTEM-level execution privileges required. Public sources confirm the impact includes availability risk, with confidentiality/integri...
Command Execution Vulnerability in 4A Unified Security Control Platform of Beijing Qixingchen Information Security Technology Co.
Beijing Qixingchen Information Security Technology Co., Ltd. is an enterprise mainly engaged in science and technology promotion and application service industry. A command execution vulnerability exists in the 4A Unified Security Control Platform of Beijing Qixingchen Information Security...
CVE-2023-33970 Missing access control in internal task links feature in Kanboard
Kanboard is open source project management software that focuses on the Kanban methodology. A vulnerability related to a missing access control was found, which allows a User with the lowest privileges to leak all the tasks and projects titles within the software, even if they are not invited or...
CVE-2023-33970
Kanboard CVE-2023-33970 corresponds to a missing access control vulnerability in the internal task links feature. A low-privileged user can leak all task and project titles, even in personal or uninvited projects, potentially exposing private/critical information contained in titles. The issue is...
bv.ac-clermont.fr Cross Site Scripting vulnerability OBB-3390127
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
lapietra.edu Cross Site Scripting vulnerability OBB-3389466
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-23598
CVE-2023-23598 describes an Arbitrary file read via GTK drag-and-drop in Firefox/Thunderbird where the GTK wrapper uses text/plain for drag data; GTK treats text/plain MIMEs with file URLs as dragged, enabling DataTransfer.setData to read local files. Affected versions: Firefox < 109, Firefox ...
CVE-2022-24695
CVE-2022-24695 concerns Bluetooth Classic in the Bluetooth Core Specification up to version 5.3, where device information for transceivers in Non-Discoverable mode is not properly concealed. An over-the-air attack could efficiently extract the permanent Bluetooth MAC identifier and device capabil...
CVE-2023-29549
CVE-2023-29549 : The issue arises when a call to bind may end up in the wrong realm, creating a vulnerability for JavaScript-based sandboxes such as SES in Firefox-based browsers. Affected products include Firefox for Android <112, Firefox <112, and Focus for Android
CVE-2023-25752
CVE-2023-25752 affects Firefox and Thunderbird due to an out-of-bounds risk when accessing throttled streams. The bug stems from not validating the count of available bytes in the caller, allowing potential memory safety issues. Affected versions include Firefox <111, Firefox ESR <102.9, an...
CVE-2023-28713
Plaintext storage of a password exists in CONPROSYS HMI System CHS versions prior to 3.5.3. Because account information of the database is saved in a local file in plaintext, a user who can access the PC where the affected product is installed can obtain the information. As a result, information ...
CVE-2023-28937
DataSpider Servista version 4.4 and earlier uses a hard-coded cryptographic key. DataSpider Servista is data integration software. ScriptRunner and ScriptRunner for Amazon SQS are used to start the configured processes on DataSpider Servista. The cryptographic key is embedded in ScriptRunner and...
Improper access control
Improper access control vulnerability exists in CONPROSYS HMI System CHS versions prior to 3.5.3. A user of the PC where the affected product is installed may gain an administrative privilege. As a result, information regarding the product may be obtained and/or altered by the user...
CVE-2023-28657
CVE-2023-28657 refers to an improper access control vulnerability in CONPROSYS HMI System (CHS) versions prior to 3.5.3. The affected product runs on CHS where a local PC user may gain administrative privileges, potentially exposing and modifying product information. The CVE is associated with CH...
ASB-A-267242697
Bulletin has no description...
CVE-2023-28348
An issue was discovered in Faronics Insight 10.0.19045 on Windows. A suitably positioned attacker could perform a man-in-the-middle attack on either a connected student or teacher, enabling them to intercept student keystrokes or modify executable files being sent from teachers to students...
