Hardcoded credentials

First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. ...

C-First DVR Security Breach

C-First DVR is a digital video recorder from C-First. A security vulnerability exists in C-First DVR that stems from a critical functionality flaw in the lack of authentication, allowing an unauthenticated, remote attacker to rewrite or obtain configuration information about the affected device...

Information disclosure

An information leak in Tokudaya.honten v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39050

An information leak in Daiky-value.Fukueten v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability, which is caused by the disclosure of side channel information in the input method. The vulnerability can be exploited by an attacker to obtain sensitive...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability, which is caused by the disclosure of side channel information in content. An attacker can exploit this vulnerability to obtain sensitive information...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Line Security Breach

Line is an instant messaging platform from Line Inc. Line suffers from a security vulnerability that originates in the applet tire-sales Line version v.13.6.1 which allows remote attackers to obtain sensitive information via a crafted GET request...

CVE-2023-39735

The leakage of the client secret in UomasaSaijinews Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

The vulnerability of the Authentication, Authorization, and Accounting (AAA) function, as well as the SCP function of Cisco IOS and Cisco IOS XE operating systems, allows attackers to circumvent security restrictions and obtain or modify the configuration of vulnerable devices.

The vulnerability of the Authentication, Authorization, and Accounting AAA function and the SCP function of Cisco IOS and Cisco IOS XE operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and obta...

Plain Craft Launcher Path Traversal Vulnerability

Plain Craft Launcher is a software. A security vulnerability exists in Plain Craft Launcher version 1.3.9 that originates from a vulnerability that could allow a local attacker to execute arbitrary code and obtain sensitive information...

CVE-2023-4061

A flaw was found in wildfly-core. A management user could use the resolve-expression in the HAL Interface to read possible sensitive information from the Wildfly system. This issue could allow a malicious user to access the system and obtain possible sensitive information from the system...

CVE-2023-39043

An information leak in YKC Tokushimaawayokocho Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39056

An information leak in Coffee-jumbo v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39039

An information leak in Camp Style Project Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

Microsoft Exchange Server 安全漏洞

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An information disclosure vulnerability exists in Microsoft Exchange Server, which can be exploit...

ROS-2-2290

2.2290 Notification on the update of the Red OS OPERATION SYSTEM No RU.29926343.02.01-01-23 Due to quality improvement and bug fixing, an updated version of MIS Operating System "RED OS" 7.3 has been released. You can contact the technical support service within the framework of your existing...

ROS-2-2310

2.2310 Notification on the update of the Red OS OPERATION SYSTEM No RU.29926343.02.01-01-23 Due to quality improvement and bug fixing, an updated version of MIS Operating System "RED OS" 7.3 has been released. You can contact the technical support service within the framework of your existing...

Trend Micro Apex One 安全漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. An access control error vulnerability exists in Trend Micro Apex One, which can be exploited by an attacker to obtain sensitive information on an agent...