Exploit for Server-Side Request Forgery in Sonicwall Sma6210_Firmware

...

ImageMagick Code Execution

The vulnerability of the console-based graphic editor ImageMagick is related to the lack of mechanisms for encoding or shielding the output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ImageMagick Memory Leak DoS

The vulnerability of the console-based graphic editor ImageMagick is related to the lack of memory release after the effective lifespan of the software. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

ImageMagick Use-After-Free

The vulnerability of the console-based graphic editor ImageMagick is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ImageMagick Resource Consumption DoS

The vulnerability of the console-based graphic editor ImageMagick is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

ImageMagick SIXEL DoS

The vulnerability of the SIXEL decoder in the console-based image editing software ImageMagick is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

ImageMagick MAT Decoder DoS

The vulnerability of the MAT decoder in the console-based ImageMagick graphics editor is related to reading data outside of the allowed range in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

ImageMagick Decoder Code Execution

The vulnerability of the MSL decoder in the console-based image editing tool ImageMagick relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

ImageMagick PCL Encoder DoS

The vulnerability of the PCL encoder in the console-based image editing tool ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ImageMagick Wavelet DoS

The vulnerability of the WaveletDenoiseImage method in the console-based image editing tool ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

ImageMagick ASHLAR Encoder DoS

The vulnerability of the ASHLAR encoder in the console-based ImageMagick graphics editor is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...

com.gccloud:gc-starter-plugins-report-controller (>=1.0.0-beta, <=2.2.2.release), com.gccloud:gc-starter-plugins-report-server (>=1.0.0-beta, <=1.2.4.2024062001.release) +11 more potentially affected by CVE-2026-38158 via com.bstek.ureport:ureport2-console (>=2.0.0, <=2.2.9)

com.bstek.ureport:ureport2-console MAVEN version =2.0.0, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.5.1, =1.5.1, =0.0.1, =1.1.0, =3.0.4-release, =2.0, =2.8.0, =4.2.0, =5.0.2 Source cves: CVE-2026-38158 Source advisory: SNYK:JAVA-COMBSTEKUREPORT-18748794...

SQL Injection

Overview com.bstek.ureport:ureport2-console is an UReport2 is a high-performance pure Java report engine based on Spring architecture, where complex Chinese-style statements and reports can be prepared by iterating over cells. Affected versions of this package are vulnerable to SQL Injection...

com.arcadedb:arcadedb-console (22.12.1), com.arcadedb:arcadedb-coverage (22.12.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (22.12.1)

com.arcadedb:arcadedb-engine MAVEN version 22.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.12.1 - com.arcadedb:arcadedb-coverage 22.12.1 -...

com.arcadedb:arcadedb-console (>=26.1.1, <=26.5.1), com.arcadedb:arcadedb-gremlin (>=26.1.1, <=26.5.1) +2 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-integration (>=26.1.1, <=26.5.1)

com.arcadedb:arcadedb-integration MAVEN version =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.5.1 Source cves: CVE-2026-54077 Source advisory: SNYK:JAVA-COMARCADEDB-18021394...

com.arcadedb:arcadedb-console (25.12.1), com.arcadedb:arcadedb-graphql (25.12.1) +13 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (25.12.1)

com.arcadedb:arcadedb-engine MAVEN version 25.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.12.1 - com.arcadedb:arcadedb-graphql 25.12.1 -...

com.arcadedb:arcadedb-console (22.2.1), com.arcadedb:arcadedb-graphql (22.2.1) +7 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (22.2.1)

com.arcadedb:arcadedb-engine MAVEN version 22.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.2.1 - com.arcadedb:arcadedb-graphql 22.2.1 -...

com.arcadedb:arcadedb-console (25.4.1), com.arcadedb:arcadedb-coverage (25.4.1) +10 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (25.4.1)

com.arcadedb:arcadedb-engine MAVEN version 25.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.4.1 - com.arcadedb:arcadedb-coverage 25.4.1 -...

com.arcadedb:arcadedb-console (24.11.2), com.arcadedb:arcadedb-coverage (24.11.2) +9 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (24.11.2)

com.arcadedb:arcadedb-engine MAVEN version 24.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 24.11.2 - com.arcadedb:arcadedb-coverage 24.11.2 -...

com.arcadedb:arcadedb-console (23.2.1), com.arcadedb:arcadedb-coverage (23.2.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (23.2.1)

com.arcadedb:arcadedb-engine MAVEN version 23.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.2.1 - com.arcadedb:arcadedb-coverage 23.2.1 -...