CVE-2023-1769 – SourceCodester Grade Point Average GPA Calculator index.php information disclosure
https://notcve.org/view.php?id=CVE-2023-1769
The manipulation of the argument page with the input php://filter/read=convert.base64-encode/resource=grade_table leads to information disclosure. ... Mittels Manipulieren des Arguments page mit der Eingabe php://filter/read=convert.base64-encode/resource=grade_table mit unbekannten Daten kann eine information disclosure-Schwachstelle ausgenutzt werden. • https://github.com/Pe4cefulSnow/CVE-Advisory/blob/main/README.md https://vuldb.com/?ctiid.224670 https://vuldb.com/?id.224670 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVE-2023-26925
https://notcve.org/view.php?id=CVE-2023-26925
An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-882 1.30. • https://github.com/laotun-s/POC/blob/main/CVE-2023-26925.txt https://www.dlink.com/en/security-bulletin •
CVE-2023-27338 – PDF-XChange Editor TIF File Parsing Use-After-Free Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2023-27338
PDF-XChange Editor TIF File Parsing Use-After-Free Information Disclosure Vulnerability. • https://www.tracker-software.com/product/pdf-xchange-editor/history https://www.zerodayinitiative.com/advisories/ZDI-23-350 • CWE-416: Use After Free •
CVE-2022-43656 – Bentley View FBX File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2022-43656
Bentley View FBX File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. ... Crafted data in an FBX file can trigger a read past the end of an allocated buffer. ... Crafted data in an FBX file can trigger a read past the end of an allocated buffer. • https://www.zerodayinitiative.com/advisories/ZDI-23-345 • CWE-125: Out-of-bounds Read •
CVE-2022-46021
https://notcve.org/view.php?id=CVE-2022-46021
X-Man 1.0 has a SQL injection vulnerability, which can cause data leakage. • https://github.com/Howard512966/x-man-injection https://github.com/Howard512966/x-man-injection/blob/main/README.md • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •