Author: Angelo Barbosa

CVE-2023-44383 | October CMS up to 3.5.1 Media Manager cross site scripting (GHSA-rvx8-p3xp-fj3p)

A vulnerability was found in October CMS up to 3.5.1 and classified as problematic. This issue affects some unknown processing of the component Media Manager. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2023-44383. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2023-47464 | GL.iNET AX1800 up to 4.4.x Upload API permission

A vulnerability has been found in GL.iNET AX1800 up to 4.4.x and classified as critical. This vulnerability affects unknown code of the component Upload API. The manipulation leads to permission issues. This vulnerability was named CVE-2023-47464. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2022-42539 | Google Android information disclosure

A vulnerability, which was classified as problematic, was found in Google Android. This affects an unknown part. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2022-42539. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2023-48952 | openlink virtuoso-opensource 7.2.11 SELECT Statement box_deserialize_reusing denial of service (Issue 1175)

A vulnerability, which was classified as problematic, has been found in openlink virtuoso-opensource 7.2.11. Affected by this issue is the function box_deserialize_reusing of the component SELECT Statement Handler. The manipulation leads to denial of service. This vulnerability is handled as CVE-2023-48952. The attack may be launched remotely. There is no exploit...

Read More