CVE-2023-40852

SQL Injection vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to obtain sensitive information via crafted string in the admin user name field on the admin log in page...

The vulnerability of the FortiGuest software for managing network guest users stems from insufficient protection of registration data, allowing attackers to obtain confidential information.

The vulnerability of the FortiGuest software for managing network guest users is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to obtain confidential information...

OpenSC Security Vulnerabilities

OpenSC is an open source smart card tool and middleware. A security vulnerability exists in OpenSC that stems from a security flaw in pkcs15init's handling of the card registration process...

PyTorch Model Server Registration / Deserialization Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/zip' class MetasploitModule 'PyTorch Model Server Registration and Deserialization RCE', 'Description' = %q The PyTorch model server contains multiple...

The vulnerability of the QVR Pro Client’s IP camera management tool, related to insufficient protection of registration data, allows a intruder to gain unauthorized access to the protected information.

The vulnerability of the QVR Pro Client’s IP camera management tool is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

MTN Group: Information disclosure via enabled Django Debug Mode

The Django Debug Mode was enabled, which resulted in the disclosure of error messages, API endpoints, and the ability to register arbitrary user accounts and enumerate email addresses of registered users...

The software for connecting to remote QVPN Device Clients for Windows is vulnerable, allowing a perpetrator to gain unauthorized access to protected information.

The vulnerability of the software for connecting to remote QVPN Device Clients for Windows is related to insufficient protection for registration data. Exploiting this vulnerability can allow a malicious individual to gain unauthorized access to protected information...

The vulnerability of the Accessibility component in operating systems like iPadOS, iOS, and macOS allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Accessibility component in iPadOS, iOS, and macOS is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the SCADA system SCADA Data Gateway (SDG) arises from improper processing of output data for registration logs, allowing a intruder to execute arbitrary code.

The vulnerability of the SCADA system SCADA Data Gateway SDG is related to the improper processing of output data for registration logs. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the root user...

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent lies in the insufficient protection of registration data, allowing attackers to obtain confidential information.

The vulnerability of backup and data recovery software on computers and servers related to Acronis Agent lies in the insufficient protection of registration data. Exploiting this vulnerability can allow attackers to obtain confidential information...

The vulnerability of Acronis Cyber Protect 15’s data protection software lies in its insufficient protection of registration data, allowing attackers to gain unauthorized access to the protected information.

The vulnerability of Acronis Cyber Protect 15 software-related data protection software lies in the insufficient protection of registration data. Exploiting this vulnerability can allow unauthorized attackers to gain unauthorized access to protected information...

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent lies in the insufficient protection of registration data, allowing attackers to obtain confidential information.

The vulnerability of backup and data recovery software on computers and servers related to Acronis Agent lies in the insufficient protection of registration data. Exploiting this vulnerability can allow attackers to obtain confidential information...

The vulnerability of the Jenkins Maven Artifact ChoiceListProvider plugin in Nexus, related to insufficient protection of registration data, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Jenkins Maven Artifact ChoiceListProvider plugin Nexus is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

PT-2023-9542 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a potential use-after-free UAF in the ca8210 probe function. If of clk add provider fails in ca8210 register ext clock, it calls clk unregister to release...

PT-2023-5792 · Acronis · Acronis Cyber Protect 16 +2

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent versions prior to build 35739 Acronis Cyber Protect 16 versions prior to build 37391 Acronis Agent versions prior to build 35739 Description: The issue is related to a sensitive information leak through log...

The vulnerability of the microprogramming software of the SolarView Compact device, which is used for measuring solar energy, data display, and storage, stems from insufficient protection of registration data. This allows a intruder to disclose confidential information.

The vulnerability of the microprogramming software of the SolarView Compact device, which is used for measuring solar energy, data display, and storage, is related to insufficient protection of registration data. Exploiting this vulnerability could allow an intruder to disclose confidential...

The vulnerability of Acronis Cyber Protect 15’s data protection software lies in its insufficient protection of registration data, allowing attackers to gain unauthorized access to the protected information.

The vulnerability of Acronis Cyber Protect 15 software-related data protection software lies in the insufficient protection of registration data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

CVE-2023-4495

Easy Chat Server, in its 3.1 version and before, does not sufficiently encrypt user-controlled inputs, resulting in a Cross-Site Scripting XSS vulnerability stored via /registresult.htm POST method, in the Resume parameter. The XSS is loaded from /register.ghp...

Code injection

DOS vulnerability that could allow an attacker to register a new VNF Virtual Network Function value. This action could trigger the argsassets function defined in the arg-log.php file, which would then execute the args-abort.c file, causing the service to crash...

CVE-2023-4882 Multiple vulnerabilities in Open5GS

DOS vulnerability that could allow an attacker to register a new VNF Virtual Network Function value. This action could trigger the argsassets function defined in the arg-log.php file, which would then execute the args-abort.c file, causing the service to crash...