rainbutterfly/cve_corpus huggingface dataset:
CVE-2023-47882 
The Kami Vision YI IoT com.yunyi.smartcamera application through 4.1.9_20231127 for Android allows a remote attacker to execute arbitrary JavaScript code via an implicit intent to the com.ants360.yicamera.activity.WebViewActivity component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-27T00:00:00.000Z
CVE-2023-47883 
The com.altamirano.fabricio.tvbrowser TV browser application through 4.5.1 for Android is vulnerable to JavaScript code execution via an explicit intent due to an exposed MainActivity.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-27T00:00:00.000Z
CVE-2023-47889 
The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported broadcast receivers. These exposed actions can allow any app on the device to send unauthorized broadcasts, leading to unintended consequences. The vulnerability is particularly concerning because these actions include powering off, system reboot & entering recovery mode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-02-06T00:00:00.000Z
CVE-2023-47890 
pyLoad 0.5.0 is vulnerable to Unrestricted File Upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-01-08T00:00:00.000Z
CVE-2023-47990 
SQL Injection vulnerability in components/table_manager/html/edit_admin_table.php in CuppaCMS V1.0 allows attackers to run arbitrary SQL commands via the table parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-20T00:00:00.000Z
CVE-2023-47992 
An integer overflow vulnerability in FreeImageIO.cpp::_MemoryReadProc in FreeImage 3.18.0 allows attackers to obtain sensitive information, cause a denial-of-service attacks and/or run arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-01-09T00:00:00.000Z
CVE-2023-47993 
A Buffer out-of-bound read vulnerability in Exif.cpp::ReadInt32 in FreeImage 3.18.0 allows attackers to cause a denial-of-service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-01-09T00:00:00.000Z
CVE-2023-47994 
An integer overflow vulnerability in LoadPixelDataRLE4 function in PluginBMP.cpp in Freeimage 3.18.0 allows attackers to obtain sensitive information, cause a denial of service and/or run arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-01-09T00:00:00.000Z
CVE-2023-47995 
Memory Allocation with Excessive Size Value discovered in BitmapAccess.cpp::FreeImage_AllocateBitmap in FreeImage 3.18.0 allows attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-01-09T00:00:00.000Z
CVE-2023-47996 
An integer overflow vulnerability in Exif.cpp::jpeg_read_exif_dir in FreeImage 3.18.0 allows attackers to obtain information and cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-01-09T00:00:00.000Z
CVE-2023-47997 
An issue discovered in BitmapAccess.cpp::FreeImage_AllocateBitmap in FreeImage 3.18.0 leads to an infinite loop and allows attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-01-09T00:00:00.000Z
CVE-2023-48003 
An open redirect through HTML injection in user messages in Asp.Net Zero before 12.3.0 allows remote attackers to redirect targeted victims to any URL via the '<meta http-equiv="refresh"' in the WebSocket messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-26T00:00:00.000Z
CVE-2023-48010 
STMicroelectronics SPC58 is vulnerable to Missing Protection Mechanism for Alternate Hardware Interface. Code running as Supervisor on the SPC58 PowerPC microcontrollers may disable the System Memory Protection Unit and gain unabridged read/write access to protected assets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-12-05T00:00:00.000Z
CVE-2023-48011 
GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a heap-use-after-free via the flush_ref_samples function at /gpac/src/isomedia/movie_fragments.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-15T00:00:00.000Z
CVE-2023-48013 
GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a double free via the gf_filterpacket_del function at /gpac/src/filter_core/filter.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-15T00:00:00.000Z
CVE-2023-48014 
GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a stack overflow via the hevc_parse_vps_extension function at /media_tools/av_parsers.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-15T00:00:00.000Z
CVE-2023-48016 
Restaurant Table Booking System V1.0 is vulnerable to SQL Injection in rtbs/admin/index.php via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-01T00:00:00.000Z
CVE-2023-48017 
Dreamer_cms 4.1.3 is vulnerable to Cross Site Request Forgery (CSRF) via Add permissions to CSRF in Permission Management.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-18T00:00:00.000Z
CVE-2023-48020 
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/changeStatus.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-14T00:00:00.000Z
CVE-2023-48021 
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/update.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-14T00:00:00.000Z
CVE-2023-48022 
Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment. (Also, within that environment, customers at version 2.52.0 and later can choose to use token authentication.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-28T00:00:00.000Z
CVE-2023-48023 
Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-28T00:00:00.000Z
CVE-2023-48024 
Liblisp through commit 4c65969 was discovered to contain a use-after-free vulnerability in void hash_destroy(hash_table_t *h) at hash.c
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-17T00:00:00.000Z
CVE-2023-48025 
Liblisp through commit 4c65969 was discovered to contain a out-of-bounds-read vulnerability in unsigned get_length(lisp_cell_t * x) at eval.c
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-17T00:00:00.000Z
CVE-2023-48028 
kodbox 1.46.01 has a security flaw that enables user enumeration. This problem is present on the login page, where an attacker can identify valid users based on varying response messages, potentially paving the way for a brute force attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-17T00:00:00.000Z
CVE-2023-48029 
Corebos 8.0 and below is vulnerable to CSV Injection. An attacker with low privileges can inject a malicious command into a table. This vulnerability is exploited when an administrator visits the user management section, exports the data to a CSV file, and then opens it, leading to the execution of the malicious payload on the administrator's computer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-17T00:00:00.000Z
CVE-2023-48031 
OpenSupports v4.11.0 is vulnerable to Unrestricted Upload of File with Dangerous Type. In the comment function, an attacker can bypass security restrictions and upload a .bat file by manipulating the file's magic bytes to masquerade as an allowed type. This can enable the attacker to execute arbitrary code or establish a reverse shell, leading to unauthorized file writes or control over the victim's station via a crafted file upload operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-17T00:00:00.000Z
CVE-2023-48034 
An issue discovered in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to both decrypt wireless keystrokes and inject arbitrary keystrokes via use of weak encryption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-27T00:00:00.000Z
CVE-2023-48039 
GPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leak in gf_mpd_parse_string media_tools/mpd.c:75.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-20T00:00:00.000Z
CVE-2023-48042 
Cross Site Scripting (XSS) in Search filters in Prestashop Amazzing filter version up to version 3.2.5, allows remote attackers to inject arbitrary JavaScript code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-28T00:00:00.000Z
CVE-2023-48049 
A SQL injection vulnerability in Cybrosys Techno Solutions Website Blog Search (aka website_search_blog) v. 13.0 through 13.0.1.0.1 allows a remote attacker to execute arbitrary code and to gain privileges via the name parameter in controllers/main.py component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-14T00:00:00.000Z
CVE-2023-48050 
SQL injection vulnerability in Cams Biometrics Zkteco, eSSL, Cams Biometrics Integration Module with HR Attendance (aka odoo-biometric-attendance) v. 13.0 through 16.0.1 allows a remote attacker to execute arbitrary code and to gain privileges via the db parameter in the controllers/controllers.py component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-15T00:00:00.000Z
CVE-2023-48051 
An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption padding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-20T00:00:00.000Z
CVE-2023-48052 
Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-16T00:00:00.000Z
CVE-2023-48053 
Archery v1.10.0 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption. This vulnerability can lead to the disclosure of information and communications.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-16T00:00:00.000Z
CVE-2023-48054 
Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-16T00:00:00.000Z
CVE-2023-48055 
SuperAGI v0.0.13 was discovered to use a hardcoded key for encryption operations. This vulnerability can lead to the disclosure of information and communications.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-16T00:00:00.000Z
CVE-2023-48056 
PyPinkSign v0.5.1 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption. This vulnerability can lead to the disclosure of information and communications.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-16T00:00:00.000Z
CVE-2023-48058 
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/task/run
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-13T00:00:00.000Z
CVE-2023-48060 
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/task/add
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-13T00:00:00.000Z
CVE-2023-48063 
An issue was discovered in dreamer_cms 4.1.3. There is a CSRF vulnerability that can delete a theme project via /admin/category/delete.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-13T00:00:00.000Z
CVE-2023-48068 
DedeCMS v6.2 was discovered to contain a Cross-site Scripting (XSS) vulnerability via spec_add.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-13T00:00:00.000Z
CVE-2023-48078 
SQL Injection vulnerability in add.php in Simple CRUD Functionality v1.0 allows attackers to run arbitrary SQL commands via the 'title' parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-16T00:00:00.000Z
CVE-2023-48082 
Nagios XI before 2024R1 was discovered to improperly handle API keys generation (randomly-generated), allowing attackers to possibly generate the same set of API keys for all users and utilize them to authenticate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-10-14T00:00:00.000Z
CVE-2023-48084 
Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-14T00:00:00.000Z
CVE-2023-48085 
Nagios XI before version 5.11.3 was discovered to contain a remote code execution (RCE) vulnerability via the component command_test.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-14T00:00:00.000Z
CVE-2023-48087 
xxl-job-admin 2.4.0 is vulnerable to Insecure Permissions via /xxl-job-admin/joblog/clearLog and /xxl-job-admin/joblog/logDetailCat.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-15T00:00:00.000Z
CVE-2023-48088 
xxl-job-admin 2.4.0 is vulnerable to Cross Site Scripting (XSS) via /xxl-job-admin/joblog/logDetailPage.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-15T00:00:00.000Z
CVE-2023-48089 
xxl-job-admin 2.4.0 is vulnerable to Remote Code Execution (RCE) via /xxl-job-admin/jobcode/save.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-15T00:00:00.000Z
CVE-2023-48090 
GPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leaks in extract_attributes media_tools/m3u8.c:329.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-20T00:00:00.000Z
CVE-2023-48094 
A cross-site scripting (XSS) vulnerability in CesiumJS v1.111 allows attackers to execute arbitrary code in the context of the victim's browser via sending a crafted payload to /container_files/public_html/doc/index.html. NOTE: the vendor’s position is that Apps/Sandcastle/standalone.html is part of the CesiumGS/cesium GitHub repository, but is demo code that is not part of the CesiumJS JavaScript library product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-14T00:00:00.000Z
CVE-2023-48104 
Alinto SOGo before 5.9.1 is vulnerable to HTML Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-01-16T00:00:00.000Z
CVE-2023-48105 
An heap overflow vulnerability was discovered in Bytecode alliance wasm-micro-runtime v.1.2.3 allows a remote attacker to cause a denial of service via the wasm_loader_prepare_bytecode function in core/iwasm/interpreter/wasm_loader.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-22T00:00:00.000Z
CVE-2023-48106 
Buffer Overflow vulnerability in zlib-ng minizip-ng v.4.0.2 allows an attacker to execute arbitrary code via a crafted file to the mz_path_resolve function in the mz_os.c file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-22T00:00:00.000Z
CVE-2023-48107 
Buffer Overflow vulnerability in zlib-ng minizip-ng v.4.0.2 allows an attacker to execute arbitrary code via a crafted file to the mz_path_has_slash function in the mz_os.c file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-22T00:00:00.000Z
CVE-2023-48109 
Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the deviceId parameter in the function saveParentControlInfo . This vulnerability allows attackers to cause a Denial of Service (DoS) attack
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-20T00:00:00.000Z
CVE-2023-48110 
Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the urls parameter in the function saveParentControlInfo . This vulnerability allows attackers to cause a Denial of Service (DoS) attack
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-20T00:00:00.000Z
CVE-2023-48111 
Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the function saveParentControlInfo . This vulnerability allows attackers to cause a Denial of Service (DoS) attack
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-20T00:00:00.000Z
CVE-2023-48114 
SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored XSS by using image/svg+xml and an uploaded SVG document. This occurs because the application tries to allow youtube.com URLs, but actually allows youtube.com followed by an @ character and an attacker-controlled domain name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-21T00:00:00.000Z
CVE-2023-48115 
SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored DOM XSS because an XSS protection mechanism is skipped when messageHTML and messagePlainText are set in the same request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-21T00:00:00.000Z
CVE-2023-48116 
SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored XSS via a crafted description of a Calendar appointment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-21T00:00:00.000Z
CVE-2023-48118 
SQL Injection vulnerability in Quest Analytics LLC IQCRM v.2023.9.5 allows a remote attacker to execute arbitrary code via a crafted request to the Common.svc WSDL page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-01-22T00:00:00.000Z
CVE-2023-48121 
An authentication bypass vulnerability in the Direct Connection Module in Ezviz CS-C6N-xxx prior to v5.3.x build 20230401, Ezviz CS-CV310-xxx prior to v5.3.x build 20230401, Ezviz CS-C6CN-xxx prior to v5.3.x build 20230401, Ezviz CS-C3N-xxx prior to v5.3.x build 20230401 allows remote attackers to obtain sensitive information by sending crafted messages to the affected devices.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-28T00:00:00.000Z
CVE-2023-48122 
An issue in microweber v.2.0.1 and fixed in v.2.0.4 allows a remote attacker to obtain sensitive information via the HTTP GET method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-08T00:00:00.000Z
CVE-2023-48123 
An issue in Netgate pfSense Plus v.23.05.1 and before and pfSense CE v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the packet_capture.php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-12-06T00:00:00.000Z
CVE-2023-48124 
Cross Site Scripting in SUP Online Shopping v.1.0 allows a remote attacker to execute arbitrary code via the Name, Email and Address parameters in the Register New Account component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-21T00:00:00.000Z
CVE-2023-48126 
An issue in Luxe Beauty Clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-01-26T00:00:00.000Z
CVE-2023-48127 
An issue in myGAKUYA mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-01-26T00:00:00.000Z
CVE-2023-48128 
An issue in UNITED BOXING GYM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-01-26T00:00:00.000Z
CVE-2023-48129 
An issue in kimono-oldnew mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-01-26T00:00:00.000Z
CVE-2023-48130 
An issue in GINZA CAFE mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-01-26T00:00:00.000Z
CVE-2023-48131 
An issue in CHIGASAKI BAKERY mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-01-26T00:00:00.000Z
CVE-2023-48132 
An issue in kosei entertainment esportsstudioLegends mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-01-26T00:00:00.000Z
CVE-2023-48133 
An issue in angel coffee mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-01-26T00:00:00.000Z
CVE-2023-48134 
nagayama_copabowl Line 13.6.1 is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-16T00:00:00.000Z
CVE-2023-48135 
An issue in mimasaka_farm mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-01-26T00:00:00.000Z
CVE-2023-48161 
Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-22T00:00:00.000Z
CVE-2023-48166 
A directory traversal vulnerability in the SOAP Server integrated in Atos Unify OpenScape Voice V10 before V10R3.26.1 allows a remote attacker to view the contents of arbitrary files in the local file system. An unauthenticated attacker might obtain sensitive files that allow for the compromise of the underlying system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-01-12T00:00:00.000Z