16460 matches found
CVE-2023-23333
There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php...
CVE-2023-23088
Buffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute arbitrary code via the jsonvalueparse function...
CVE-2022-48021
A vulnerability in Zammad v5.3.0 allows attackers to execute arbitrary code or escalate privileges via a crafted message sent to the server...
Security Bulletin: IBM Aspera Orchestrator affected by vulnerability (CVE-2022-23943)
Summary The following vulnerability has been addressed in IBM Aspera Orchestrator 4.0.1. Vulnerability Details CVEID:CVE-2022-23943 DESCRIPTION: Apache HTTP Server could allow a remote attacker to execute arbitrary code on the system, caused by an out-of-bounds write in modsed. By sending special...
CVE-2022-31364
Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA010705.01.00-BX8-AMESH-08 is affected by: Buffer Overflow. The impact is: execute arbitrary code remote. The component is: affected function is lowertransportlayeronseg. ¶¶ In Cypress Bluetooth Mesh SDK, there is an out-of-bound...
CVE-2023-22374
A format string vulnerability exists in iControl SOAP that allows an authenticated attacker to crash the iControl SOAP CGI process or, potentially execute arbitrary code. In appliance mode BIG-IP, a successful exploit of this vulnerability can allow the attacker to cross a security boundary. Note...
CVE-2023-22374
A format string vulnerability exists in iControl SOAP that allows an authenticated attacker to crash the iControl SOAP CGI process or, potentially execute arbitrary code. In appliance mode BIG-IP, a successful exploit of this vulnerability can allow the attacker to cross a security boundary. Note...
CVE-2023-23135
An arbitrary file upload vulnerability in Ftdms v3.1.6 allows attackers to execute arbitrary code via uploading a crafted JPG file...
CVE-2023-23135
An arbitrary file upload vulnerability in Ftdms v3.1.6 allows attackers to execute arbitrary code via uploading a crafted JPG file...
CVE-2022-31363
Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA010705.01.00-BX8-AMESH-08 is affected by: Buffer Overflow. The impact is: execute arbitrary code remote. The component is: affected function is pbtransporthandlefrag. ¶¶ In Cypress Bluetooth Mesh SDK, there is an out-of-bound write...
CVE-2022-31364
Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA010705.01.00-BX8-AMESH-08 is affected by: Buffer Overflow. The impact is: execute arbitrary code remote. The component is: affected function is lowertransportlayeronseg. ¶¶ In Cypress Bluetooth Mesh SDK, there is an out-of-bound...
Apache InLong code issue vulnerabilities
Apache InLong is the United States Apache Apache Foundation's one-stop massive data integration framework. Apache InLong suffers from a deserialization vulnerability that can be exploited by a remote attacker to submit a special request and execute arbitrary code in the application context...
CVE-2022-31363
CVE-2022-31363 affects Cypress Bluetooth Mesh SDK version BSA0107_05.01.00-BX8-AMESH-08. The vulnerability is a buffer overflow caused by an out-of-bounds write during mesh provisioning, due to no check for mismatched SegN and TotalLength in the Transaction Start PDU. The affected component is th...
CVE-2023-24163
SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine...
Malicious code in python-statface-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6a7521acfc06ff8a2343608ac29b76d6e30bd42edc43de78f47282a5cf65ce9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in qb2-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccaba51ce2f483353a479caa2c736c3ae023bf6b83eace0030e7e1853d3605bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Tenda AC18 Buffer Overflow Vulnerability (CNVD-2023-21676)
Tenda AC18 is a router from Tenda. Tenda AC18 is vulnerable to a buffer overflow vulnerability that could be exploited by an attacker to submit a special request that could crash a program or execute arbitrary code in context...
Tenda AC18 Buffer Overflow Vulnerability (CNVD-2023-21674)
Tenda AC18 is a router from Tenda. Tenda AC18 is vulnerable to a buffer overflow vulnerability that could be exploited by an attacker to submit a special request that could crash the program or execute arbitrary code in the context...
Tenda AC18 Buffer Overflow Vulnerability (CNVD-2023-21671)
Tenda AC18 is a router from Tenda. Tenda AC18 is vulnerable to a buffer overflow vulnerability that could be exploited by an attacker to submit a special request that could crash a program or execute arbitrary code in context...