28024 matches found
PT-2023-22934 · Samsung Mobile +1 · Samsung Mobile Devices +1
Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: A logic error in package installation via debugger command allows a physical attacker to install an application that has a different build type. This issue is present prior to the SMR...
Design/Logic Flaw
A flaw exists in FlashBlade Purity whereby an authenticated user with access to FlashBlade’s object store protocol can impact the availability of the system’s data access and replication protocols...
Design/Logic Flaw
A flaw exists in FlashBlade Purity OE Version 4.1.0 whereby a user with privileges to extend an object’s retention period can affect the availability of the object lock...
Design/Logic Flaw
In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
Design/Logic Flaw
An issue has been discovered in Ultimate-licensed GitLab EE affecting all versions starting 13.12 prior to 16.2.8, 16.3.0 prior to 16.3.5, and 16.4.0 prior to 16.4.1 that could allow an attacker to impersonate users in CI pipelines through direct transfer group imports...
Design/Logic Flaw
Mattermost fails to check the Show Full Name option at the /api/v4/teams/TEAMID/top/teammembers endpoint allowing a member to get the full name of another user even if the Show Full Name option was disabled...
CVE-2023-5329
A vulnerability classified as problematic was found in Field Logic DataCube4 up to 20231001. This vulnerability affects unknown code of the file /api/ of the component Web API. The manipulation leads to improper authentication. The exploit has been disclosed to the public and may be used...
CVE-2023-5329
A vulnerability classified as problematic was found in Field Logic DataCube4 up to 20231001. This vulnerability affects unknown code of the file /api/ of the component Web API. The manipulation leads to improper authentication. The exploit has been disclosed to the public and may be used...
Authentication flaw
A vulnerability classified as problematic was found in Field Logic DataCube4 up to 20231001. This vulnerability affects unknown code of the file /api/ of the component Web API. The manipulation leads to improper authentication. The exploit has been disclosed to the public and may be used...
CVE-2023-5329 Field Logic DataCube4 Web API improper authentication
A vulnerability classified as problematic was found in Field Logic DataCube4 up to 20231001. This vulnerability affects unknown code of the file /api/ of the component Web API. The manipulation leads to improper authentication. The exploit has been disclosed to the public and may be used...
CVE-2023-5329 Field Logic DataCube4 Web API improper authentication
A vulnerability classified as problematic was found in Field Logic DataCube4 up to 20231001. This vulnerability affects unknown code of the file /api/ of the component Web API. The manipulation leads to improper authentication. The exploit has been disclosed to the public and may be used...
CVE-2023-5329
CVE-2023-5329 affects Field Logic DataCube4 Web API (endpoint /api/). The vulnerability arises from improper authentication in the Web API, enabling potential unauthorized access. Affected version: DataCube4 up to 20231001. The exploit has been disclosed publicly. CVSS 3.1 base score 7.5 ( HIGH )...
Field Logic DataCube4 Authorization Issues Vulnerability
Field Logic DataCube4 is a small measurement terminal system from Field Logic. Field Logic DataCube4 suffers from an authorization issue vulnerability that stems from improper authentication in the component web api...
PT-2023-32048 · Field Logic · Field Logic Datacube4
Name of the Vulnerable Software and Affected Versions: Field Logic DataCube4 up to 20231001 Description: A problematic issue was found in the Web API component, affecting unknown code of the file /api/. This leads to improper authentication. The exploit has been disclosed to the public and may be...
Design/Logic Flaw
A vulnerability has been found in eeroOS up to 6.16.4-11 and classified as critical. This vulnerability affects unknown code of the component Ethernet Interface. The manipulation leads to denial of service. The attack needs to be approached within the local network. The exploit has been disclosed...
Design/Logic Flaw
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory...
PUB-A-279767668
there is a possible way to bypass carrier restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-270368476
In onTaskAppeared of PipTaskOrganizer.java, there is a possible way to bypass background activity launch restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...