Most recent entries from all

EUVD-2026-196107

fkie_cve-2023-38751

Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorized API users to view the organization information of the information receiver that is set as "non-disclosure" in the information provision operation.

GHSA-6q6m-j9j3-cpq4

gsd-2023-38751

jvndb-2023-000079

Special Interest Group Network for Analysis and Liaison's "Inter-SOC Cooperation API" provided by Japan Computer Emergency Response Team Coordination Center (JPCERT/CC) contains multiple vulnerabilities listed below. * Improper Authorization in Information Provision function (CWE-285) - CVE-2023-38751 * Improper Authorization in Information Provision and Group Message functions (CWE-285) - CVE-2023-38752 yusuke negishi of JPCERT/CC Platform Service Group reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.