1794 matches found
Code injection
When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash. This vulnerability affects Firefox 110, Thunderbird 102.8, and Firefox ESR 102.8...
CVE-2023-25742
When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash. This vulnerability affects Firefox 110, Thunderbird 102.8, and Firefox ESR 102.8...
CVE-2023-25742
CVE-2023-25742 : When importing a SPKI RSA public key as ECDSA P-256, the key is handled incorrectly, causing the tab to crash. Affected products per provided docs: Firefox < 110, Thunderbird < 102.8, and Firefox ESR
CVE-2022-4332
In Sprecher Automation SPRECON-E-C/P/T3 CPU in variant PU244x a vulnerable firmware verification has been identified. Through physical access and hardware manipulation, an attacker might be able to bypass hardware-based code verification and thus inject and execute arbitrary code and gain full...
Design/Logic Flaw
In Sprecher Automation SPRECON-E-C/P/T3 CPU in variant PU244x a vulnerable firmware verification has been identified. Through physical access and hardware manipulation, an attacker might be able to bypass hardware-based code verification and thus inject and execute arbitrary code and gain full...
CVE-2022-4332 Sprecher: Vulnerable firmware verification
In Sprecher Automation SPRECON-E-C/P/T3 CPU in variant PU244x a vulnerable firmware verification has been identified. Through physical access and hardware manipulation, an attacker might be able to bypass hardware-based code verification and thus inject and execute arbitrary code and gain full...
Sql injection
An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is an unauthenticated SQL injection in the p parameter of the processlogin.php login form...
TP-Link Archer VR1600V Command Injection Vulnerability
The TP-Link Archer VR1600V is a wireless modem from China P&L TP-LINK. The TP-Link Archer VR1600V suffers from a command injection vulnerability that stems from the application failing to properly filter constructed command special characters, commands, etc. An attacker could exploit the...
PT-2023-24245 · Akka Http · Akka Http
Name of the Vulnerable Software and Affected Versions: Akka HTTP versions prior to 10.5.2 Description: The issue arises when Akka HTTP accepts file uploads via the FileUploadDirectives.fileUploadAll directive, creating a temporary file with weak permissions that can be read by other users on Linu...
PT-2023-36151 · Openssl +1 · Openssl +1
Name of the Vulnerable Software and Affected Versions: openssl-ibmca versions prior to 2.4.0 Description: The issue concerns adjustments and fixes for OpenSSL versions 3.1 and 3.2, including support for RSA blinding, constant-time fixes for RSA PKCS1 v1.5 and OAEP padding, and support for 'implic...
SUSE CVE-2006-2759
jetty 6.0.x jetty6 beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations...
Binary Vulnerability in GR1108-P of Xinhua San Technologies Ltd.
The GR1108-P is a Gigabit wireless enterprise-class routing device manufactured by Xinhua San Technologies H3C. A binary vulnerability exists in the Xinhua San Technologies GR1108-P, which can be exploited by an attacker to gain control of the server...
Fedora 38 : dpdk / openvswitch (2023-a633c4273f)
The remote Fedora 38 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-a633c4273f advisory. dpdk updated to 22.11.1 and openvswitch updated to 3.1.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. No...
Sales Tracker Management System 1.0 Insecure Direct Object Reference
Exploit Title: Sales Tracker Management System v1.0 - Sensitive information disclosure CVE: CVE-2023-26774 Exploit Author: Achuth V P retrymp3 Date: February 08, 2023 Vendor Homepage: https://www.sourcecodester.com/php/16061/sales-tracker-management-system-using-php-free-source-code.html Software...
sungusukuma.p-moba.net Cross Site Scripting vulnerability OBB-3241466
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-43314
CVE-2021-43314 describes a heap-based buffer overflow in UPX, triggered in PackLinuxElf32::elf_lookup() via an inaccessible address addressed by the generic pointer p in get_le32() (p_lx_elf.cpp:5368). The issue is under UPX ELF32 parsing and, per connected advisories, was addressed by updating U...
CVE-2021-43316
A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle64...
p-cal.com Cross Site Scripting vulnerability OBB-3220031
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...