Search Results (24344 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-39382 1 Huawei 2 Emui, Harmonyos 2024-11-21 7.5 High
Input verification vulnerability in the audio module. Successful exploitation of this vulnerability may cause virtual machines (VMs) to restart.
CVE-2023-39381 1 Huawei 2 Emui, Harmonyos 2024-11-21 7.5 High
Input verification vulnerability in the storage module. Successful exploitation of this vulnerability may cause the device to restart.
CVE-2023-39343 1 Sulu 1 Sulu 2024-11-21 4.3 Medium
Sulu is an open-source PHP content management system based on the Symfony framework. It allows over the Admin Login form to detect which user (username, email) exists and which one do not exist. Sulu Installation not using the old Symfony 5.4 security System and previous version are not impacted by this Security issue. The vulnerability has been patched in version 2.5.10.
CVE-2023-39337 1 Ivanti 1 Endpoint Manager Mobile 2024-11-21 9.1 Critical
A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with knowledge of an enrolled device identifier to access and extract sensitive information, including device and environment configuration details, as well as secrets. This vulnerability poses a serious security risk, potentially exposing confidential data and system integrity.
CVE-2023-39289 1 Mitel 1 Mivoice Connect 2024-11-21 7.5 High
A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could allow an unauthenticated attacker to conduct an account enumeration attack due to improper configuration. A successful exploit could allow an attacker to access system information.
CVE-2023-39264 1 Apache 1 Superset 2024-11-21 4.3 Medium
By default, stack traces for errors were enabled, which resulted in the exposure of internal traces on REST API endpoints to users. This vulnerability exists in Apache Superset versions up to and including 2.1.0.
CVE-2023-39251 1 Dell 26 Inspiron 7510, Inspiron 7510 Firmware, Inspiron 7610 and 23 more 2024-11-21 6.7 Medium
Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability in order to corrupt memory on the system.
CVE-2023-39209 1 Zoom 1 Zoom 2024-11-21 5.9 Medium
Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via network access.
CVE-2023-39208 1 Zoom 1 Zoom 2024-11-21 6.5 Medium
Improper input validation in Zoom Desktop Client for Linux before version 5.15.10 may allow an unauthenticated user to conduct a denial of service via network access.
CVE-2023-39137 1 Archive Project 1 Archive 2024-11-21 7.8 High
An issue in Archive v3.3.7 allows attackers to spoof zip filenames which can lead to inconsistent filename parsing.
CVE-2023-39057 1 Lycorp 1 Line Mini App 2024-11-21 7.5 High
An information leak in hirochanKAKIwaiting v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39054 1 Lycorp 1 Line Mini App 2024-11-21 7.5 High
An information leak in Tokudaya.ekimae_mc v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39053 1 Lycorp 1 Line Mini App 2024-11-21 7.5 High
An information leak in Hattoriya v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39052 1 Earthgarden Waiting Project 1 Earthgarden Waiting 2024-11-21 6.5 Medium
An information leak in Earthgarden_waiting 13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39051 1 Lycorp 1 Line Mini App 2024-11-21 7.5 High
An information leak in VISION MEAT WORKS Track Diner 10/10mbl v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39050 1 Lycorp 1 Line Mini App 2024-11-21 7.5 High
An information leak in Daiky-value.Fukueten v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39048 1 Lycorp 1 Line Mini App 2024-11-21 7.5 High
An information leak in Tokudaya.honten v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39047 1 Lycorp 1 Line Mini App 2024-11-21 7.5 High
An information leak in shouzu sweets oz v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39045 1 Kokoroe Members Card Project 1 Kokoroe Members Card 2024-11-21 6.5 Medium
An information leak in kokoroe_members card Line 13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39042 1 Lycorp 1 Line Mini App 2024-11-21 7.5 High
An information leak in Gyouza-newhushimi v13.6.1 allows attackers to obtain the channel access token and send crafted messages.