Information disclosure

Windows Hyper-V Information Disclosure Vulnerability...

CVE-2023-36908

CVE-2023-36908 details are not publicly provided in the supplied documents. No explicit affected products, root cause, or remediation are described. Monitor for updates from official sources.

CVE-2023-36908 Windows Hyper-V Information Disclosure Vulnerability

...

CVE-2023-36908 Windows Hyper-V Information Disclosure Vulnerability

...

CVE-2023-38773

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the volopp1 and volopp2 parameters within the /QueryView.php...

CVE-2023-38769

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the searchstring and searchwhat parameters within the /QueryView.php...

CVE-2023-38765

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the membermonth parameter within the /QueryView.php...

CVE-2023-38762

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the friendmonths parameter within the /QueryView.php...

Sql injection

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the friendmonths parameter within the /QueryView.php...

Sql injection

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the birthmonth and percls parameters within the /QueryView.php...

Sql injection

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the searchstring and searchwhat parameters within the /QueryView.php...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Windows Hyper-V Information Disclosure Vulnerability

...

CVE-2023-38763

CVE-2023-38763 is a SQL injection vulnerability affecting ChurchCRM v5.0.0. The issue allows a remote attacker to obtain sensitive information through the FundRaiserID parameter in the /FundRaiserEditor.php endpoint. The vulnerability is documented across multiple sources (NVD/Red Hat/OSV/others)...

PT-2023-4383 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to a lack of protection for sensitive data in the Windows Hyper-V system, which can allow an attacker to disclose protected information. There is no information...

CVE-2023-38765

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the membermonth parameter within the /QueryView.php...

CVE-2023-38764

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the birthmonth and percls parameters within the /QueryView.php...

CVE-2023-38760

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the role and gender parameters within the /QueryView.php component...

Microsoft Hyper-V Security Vulnerability

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. Microsoft Role: A security vulnerability exists in Windows Hyper-V. An attacker exploiting this vulnerability could gain access to sensitive...

CVE-2023-38771

ChurchCRM v5.0.0 is affected by an SQL injection via the volopp parameter in /QueryView.php. Root cause: improper handling of user input in that endpoint leads to database query manipulation. Impact per the records includes exposure of sensitive information to remote attackers; exploitation detai...