Lucene search
+L

13885 matches found

OSV
OSV
added 2023/11/01 9:30 a.m.37 views

GHSA-48V2-596X-4JR9 Dolibarr Improper Input Validation vulnerability

Improper Access Control in Dolibarr ERP CRM = v17.0.3 allows an unauthorized authenticated user to read a database table containing customer data...

6.5CVSS6.1AI score0.00555EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2023/11/01 9:30 a.m.31 views

Dolibarr Improper Input Validation vulnerability

Improper Access Control in Dolibarr ERP CRM = v17.0.3 allows an unauthorized authenticated user to read a database table containing customer data...

6.5CVSS6.9AI score0.00555EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2023/11/01 9:15 a.m.12 views

CVE-2023-4198

Improper Access Control in Dolibarr ERP CRM = v17.0.3 allows an unauthorized authenticated user to read a database table containing customer data...

6.5CVSS6.2AI score0.00555EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/11/01 8:01 a.m.11 views

CVE-2023-4198 Dolibarr ERP CRM (<= 17.0.3) Improper Access Control

Improper Access Control in Dolibarr ERP CRM = v17.0.3 allows an unauthorized authenticated user to read a database table containing customer data...

6.5CVSS6.4AI score0.00555EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/01 8:01 a.m.19 views

CVE-2023-4198 Dolibarr ERP CRM (<= 17.0.3) Improper Access Control

Improper Access Control in Dolibarr ERP CRM = v17.0.3 allows an unauthorized authenticated user to read a database table containing customer data...

6.5CVSS6.6AI score
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2023/11/01 12:00 a.m.35 views

CVE-2023-4198

Improper Access Control in Dolibarr ERP CRM = v17.0.3 allows an unauthorized authenticated user to read a database table containing customer data...

6.5CVSS6.6AI score0.00555EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2023/10/31 12:00 a.m.27 views

Huawei EulerOS: Security Advisory for grpc (EulerOS-SA-2023-3030)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.00479EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
added 2023/10/30 7:19 p.m.7 views

round-table-weimar.de Improper Access Control vulnerability OBB-3769431

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.9AI score
SaveExploits0
OSV
OSV
added 2023/10/30 3:15 a.m.10 views

CVE-2023-46866

In International Color Consortium DemoIccMAX 79ecb74, CIccCLUT::Interp3d in IccProfLib/IccTagLut.cpp in libSampleICC.a attempts to access array elements at out-of-bounds indexes...

6.5CVSS5.8AI score0.00571EPSS
SaveExploits1References2
Packet Storm
Packet Storm
added 2023/10/26 12:00 a.m.479 views

Oracle 19c / 21c Sharding Component Password Hash Exposure

Title: CVE-2023-22074 – Oracle database password hash exposure in sharding component Product: Database Manufacturer: Oracle Affected Versions: 19c,21c 19.3-19.20 and 21.3-21.11 Tested Versions: 19c Risk Level: Low Solution Status: Fixed CVE Reference: CVE-2023-22074 Base Score: 2.4 Author of...

2.4CVSS7.1AI score0.00887EPSS
SaveExploits2
CVE
CVE
added 2023/10/25 2:03 a.m.51 views

CVE-2023-34085

CVE-2023-34085 describes a vulnerability where, if an AWS DynamoDB table is used for storing user attributes, an attacker can craft a request to retrieve another user’s attributes. The connected records corroborate this label and tie the issue to Ping Identity PingFederate and related disclosures...

4.3CVSS4AI score0.00467EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2023/10/19 12:00 a.m.10 views

IBM DB2 Denial of Service Vulnerability (CNVD-2023-100318)

IBM DB2 is a relational database management system from International Business Machines IBM. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM DB2 version 11.1 and 11.5, which can be exploited ...

7.5CVSS6.5AI score0.00782EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2023/10/18 12:00 a.m.17 views

WordPress WP Simple Table Manager Plugin <= 1.5.6 is vulnerable to Cross Site Scripting (XSS)

Software WP Simple Table Manager Type Plugin Vulnerable versions = 1.5.6 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4858 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 4aaeb214600f Credits niclo Required...

4.8CVSS5.7AI score0.00405EPSS
SaveExploits2References2Affected Software1
OSV
OSV
added 2023/10/17 12:15 a.m.10 views

CVE-2023-40373

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server is vulnerable to denial of service with a specially crafted query containing common table expressions. IBM X-Force ID: 263574...

7.5CVSS7.2AI score0.00812EPSS
SaveExploits0References3
NVD
NVD
added 2023/10/17 12:15 a.m.28 views

CVE-2023-40373

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server is vulnerable to denial of service with a specially crafted query containing common table expressions. IBM X-Force ID: 263574...

7.5CVSS6.8AI score0.00812EPSS
SaveExploits0References3
Prion
Prion
added 2023/10/17 12:15 a.m.25 views

Design/Logic Flaw

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server is vulnerable to denial of service with a specially crafted query containing common table expressions. IBM X-Force ID: 263574...

5CVSS7.6AI score0.00812EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/10/16 11:08 p.m.43 views

CVE-2023-40373 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server is vulnerable to denial of service with a specially crafted query containing common table expressions. IBM X-Force ID: 263574...

5.3CVSS7.3AI score0.00812EPSS
SaveExploits0References3
OSV
OSV
added 2023/10/16 9:15 p.m.5 views

CVE-2023-38720

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5 and 11.5 is vulnerable to denial of service with a specially crafted ALTER TABLE statement. IBM X-Force ID: 261616...

7.5CVSS5.5AI score0.00782EPSS
SaveExploits0References3
NVD
NVD
added 2023/10/16 9:15 p.m.18 views

CVE-2023-38720

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5 and 11.5 is vulnerable to denial of service with a specially crafted ALTER TABLE statement. IBM X-Force ID: 261616...

7.5CVSS6.8AI score0.00782EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/10/16 8:52 p.m.5 views

CVE-2023-38720 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5 and 11.5 is vulnerable to denial of service with a specially crafted ALTER TABLE statement. IBM X-Force ID: 261616...

5.3CVSS6.5AI score0.00782EPSS
SaveExploits0References3
Rows per page
Query Builder