CWE:

	Topic	Date	Author
Med.	OX App Suite SSRF / Resource Consumption / Command Injection	22.06.2023	Mehmet Ince

---

CVEMAP Search Results

CVE

Details

Description

2023-09-19

CVE-2023-32184

Updating...

A Insecure Storage of Sensitive Information vulnerability in openSUSE opensuse-welcome allows local attackers to execute code as the user that runs opensuse-welcome if a custom layout is chosen This issue affects opensuse-welcome: from 0.1 before 0.1.9+git.35.4b9444a.

2023-09-18

CVE-2023-41965

Updating...

** UNSUPPPORTED WHEN ASSIGNED ** Sending some requests in the web application of the vulnerable device allows information to be obtained due to the lack of security in the authentication process.

2023-09-12

CVE-2023-40728

Updating...

A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application stores sensitive application data in an external insecure storage. This could allow an attacker to alter content, leading to arbitrary code execution or denial-of-service condition.

2023-04-16

CVE-2023-22687

Updating...

Insecure Storage of Sensitive Information vulnerability in Jose Mortellaro Freesoul Deactivate Plugins �?? Plugin manager and cleanup plugin <= 1.9.4.0 versions.

2023-01-14

CVE-2022-2815

Updating...

Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10.

2023-01-10

CVE-2023-22469

Updating...

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. When getting the reference preview for Deck cards the user has no access to, unauthorized user could eventually get the cached data of a user that has access. There are currently no known workarounds. It is recommended that the Nextcloud app Deck is upgraded to 1.8.2.

2022-08-19

CVE-2022-1021

Updating...

Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0.

2022-06-07

Low

CVE-2022-30740

Vendor: Samsung Software: Internet

Improper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical attackers to guess stored credit card numbers.

2022-06-02

Low

CVE-2021-43512

Vendor: Flightradar24 Software: Flightradar2...

An issue was discovered in FlightRadar24 v8.9.0, v8.10.0, v8.10.2, v8.10.3, v8.10.4 for Android, allows attackers to cause unspecified consequences due to being able to decompile a local application and extract their API keys.

2022-05-12

Low

CVE-2022-1044

Vendor: Trudesk project Software: Trudesk

Sensitive Data Exposure Due To Insecure Storage Of Profile Image in GitHub repository polonel/trudesk prior to v1.2.1.

 

---

Copyright 2023, cxsecurity.com