Lucene search

K

EC-CUBE CO.,LTD. Security Vulnerabilities

cve
cve

CVE-2023-42733

In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.2AI Score

0.0004EPSS

2023-12-04 01:15 AM
3
cve
cve

CVE-2023-42730

In IMS service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
7
cve
cve

CVE-2023-42713

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
3
cve
cve

CVE-2023-42708

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
6
cve
cve

CVE-2023-42681

In ion service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS

7.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
4
cve
cve

CVE-2023-42704

In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.2AI Score

0.0004EPSS

2023-12-04 01:15 AM
4
cve
cve

CVE-2023-42685

In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS

7.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
5
cve
cve

CVE-2023-42712

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
6
cve
cve

CVE-2023-42688

In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS

7.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
5
cve
cve

CVE-2022-48463

In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges...

5.5CVSS

5.5AI Score

0.0004EPSS

2023-12-04 01:15 AM
6
cve
cve

CVE-2023-42672

In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.2AI Score

0.0004EPSS

2023-12-04 01:15 AM
4
cve
cve

CVE-2023-42698

In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
4
cve
cve

CVE-2023-42707

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
5
cve
cve

CVE-2023-42709

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
10
cve
cve

CVE-2023-42729

In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges...

4.4CVSS

4.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
7
cve
cve

CVE-2023-42701

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
5
cve
cve

CVE-2023-42703

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
3
cve
cve

CVE-2023-42702

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
3
cve
cve

CVE-2023-42705

In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.2AI Score

0.0004EPSS

2023-12-04 01:15 AM
5
cve
cve

CVE-2023-42697

In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
5
cve
cve

CVE-2023-42700

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
8
mmpc
mmpc

How Strata Identity and Microsoft Entra ID solve identity challenges in mergers and acquisitions

This blog post is part of the Microsoft Intelligent Security Association guest blog series. Learn more about MISA. Along with every merger and acquisition between two companies comes the need to combine and strengthen their IT infrastructure. In particular, there is an immediate and profound...

7.3AI Score

2023-12-19 05:00 PM
6
cve
cve

CVE-2023-42693

In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS

7.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
13
cve
cve

CVE-2023-42671

In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.2AI Score

0.0004EPSS

2023-12-04 01:15 AM
5
cve
cve

CVE-2023-42691

In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS

7.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
6
cve
cve

CVE-2022-48462

In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges...

5.5CVSS

5.5AI Score

0.0004EPSS

2023-12-04 01:15 AM
6
cve
cve

CVE-2022-48464

In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges...

5.5CVSS

5.5AI Score

0.0004EPSS

2023-12-04 01:15 AM
5
cve
cve

CVE-2023-42673

In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.2AI Score

0.0004EPSS

2023-12-04 01:15 AM
5
cve
cve

CVE-2023-42674

In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.2AI Score

0.0004EPSS

2023-12-04 01:15 AM
5
cve
cve

CVE-2023-42675

In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.2AI Score

0.0004EPSS

2023-12-04 01:15 AM
8
cve
cve

CVE-2023-42677

In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.2AI Score

0.0004EPSS

2023-12-04 01:15 AM
5
cve
cve

CVE-2023-42692

In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS

7.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
9
cve
cve

CVE-2023-42694

In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS

7.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
4
cve
cve

CVE-2023-42695

In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS

7.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
5
cve
cve

CVE-2023-42689

In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS

7.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
4
cve
cve

CVE-2023-42678

In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.2AI Score

0.0004EPSS

2023-12-04 01:15 AM
6
cve
cve

CVE-2023-42686

In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS

7.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
5
cve
cve

CVE-2023-42687

In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS

7.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
4
cve
cve

CVE-2023-42690

In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS

7.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
9
cve
cve

CVE-2023-42676

In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.2AI Score

0.0004EPSS

2023-12-04 01:15 AM
5
cve
cve

CVE-2023-3741

An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the...

9.8CVSS

9.6AI Score

0.001EPSS

2023-11-30 01:15 AM
11
osv
osv

CVE-2021-43817

Collabora Online is a collaborative online office suite based on LibreOffice technology. In affected versions a reflected XSS vulnerability was found in Collabora Online. An attacker could inject unescaped HTML into a variable as they created the Collabora Online iframe, and execute scripts inside....

6.1CVSS

6.1AI Score

0.001EPSS

2021-12-13 08:15 PM
3
cve
cve

CVE-2023-43752

OS command injection vulnerability in WRC-X3000GS2-W v1.05 and earlier, WRC-X3000GS2-B v1.05 and earlier, and WRC-X3000GS2A-B v1.05 and earlier allows a network-adjacent authenticated user to execute an arbitrary OS command by sending a specially crafted...

8CVSS

7.9AI Score

0.0004EPSS

2023-11-16 07:15 AM
5
cnvd
cnvd

Information Disclosure Vulnerability in UFIDA UAP System

UFIDA Network Technology Co., Ltd. is a leading global provider of enterprise cloud services and software. An information disclosure vulnerability exists in the UFIDA UAP system, which can be exploited by attackers to obtain sensitive...

6.4AI Score

2023-10-18 12:00 AM
3
cvelist
cvelist

CVE-2023-39921 WordPress Molongui Plugin <= 4.6.19 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Molongui Author Box, Guest Author and Co-Authors for Your Posts – Molongui allows Stored XSS.This issue affects Author Box, Guest Author and Co-Authors for Your Posts – Molongui: from n/a through.....

5.9CVSS

6AI Score

0.0004EPSS

2023-11-30 03:47 PM
1
apple
apple

About the security content of macOS Sonoma 14.2

About the security content of macOS Sonoma 14.2 This document describes the security content of macOS Sonoma 14.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are....

9.8CVSS

9.1AI Score

0.009EPSS

2023-12-11 12:00 AM
17
cnvd
cnvd

Information leakage vulnerability in EG2000SE of Beijing StarNet Ruijie Network Technology Co. Ltd (CNVD-2023-88652)

The EG2000SE is a multi-service router. An information disclosure vulnerability exists in the EG2000SE of Beijing StarNet Ruijie Network Technology Company Limited, which can be exploited by attackers to obtain sensitive...

6.4AI Score

2023-10-24 12:00 AM
6
cnvd
cnvd

Information leakage vulnerability in the electronic document security management system of Beijing Yisaitong Technology Development Co., Ltd (CNVD-2023-86622)

Beijing Yisetong Technology Development Co., Ltd. is a leading data security business provider in China. An information leakage vulnerability exists in the electronic document security management system of Beijing Yisetong Technology Development Co., Ltd, which can be exploited by attackers to...

6.6AI Score

2023-10-17 12:00 AM
5
talosblog
talosblog

Year in Malware 2023: Recapping the major cybersecurity stories of the past year

If there is anything the cybersecurity world learned in 2023, it's that you can never count any bad guy out. Botnets kept coming back from the dead, ransomware actors found new ways to make money through data theft extortion and threat actors and malware who have been around for more than a decade....

7.5CVSS

7.5AI Score

0.732EPSS

2023-12-19 01:00 PM
17
apple
apple

About the security content of iOS 17.2 and iPadOS 17.2

About the security content of iOS 17.2 and iPadOS 17.2 This document describes the security content of iOS 17.2 and iPadOS 17.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches...

8.8CVSS

7.8AI Score

0.002EPSS

2023-12-11 12:00 AM
24
Total number of security vulnerabilities16035