125 matches found
CVE-2024-1004
A vulnerability, which was classified as critical, was found in Totolink N200RE 9.3.5u.6139B20201216. This affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument httphost leads to stack-based buffer overflow. It is possible to initiate the attack remotel...
CVE-2024-1004 Totolink N200RE cstecgi.cgi loginAuth stack-based overflow
A vulnerability, which was classified as critical, was found in Totolink N200RE 9.3.5u.6139B20201216. This affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument httphost leads to stack-based buffer overflow. It is possible to initiate the attack remotel...
CVE-2024-1004
The CVE-2024-1004 entry applies to Totolink N200RE firmware version 9.3.5u.6139_B20201216, affecting the loginAuth() function in /cgi-bin/cstecgi.cgi. The root cause is a stack-based buffer overflow triggered by manipulating the http_host argument, enabling remote exploitation. Public exploit det...
MAL-2024-264 Malicious code in wlwz-2312-1004 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dc70a8e4d71f4e27cc174a88b44833225e592c19372c10540482712caa52eb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wlwz-2312-1004 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dc70a8e4d71f4e27cc174a88b44833225e592c19372c10540482712caa52eb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-1004
creationtimestamp| type| source ---|---|--- 2023-02-24 12:49:18+00:00| seen| https://t.me/cibsecurity/58857...
CVE-2023-1004
MarkText up to version 0.17.1 on Windows is affected by CVE-2023-1004, with a vulnerability in the WSH JScript Handler that enables code injection. The issue requires local access and has publicly disclosed exploit information. The advisory lists update to a version later than 0.17.1 as the remed...
CVE-2017-1004
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...
SUSE CVE-2011-1004
The FileUtils.removeentrysecure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, 1.8.8dev, 1.9.1 through 1.9.1-430, 1.9.2 through 1.9.2-136, and 1.9.3dev allows local users to delete arbitrary files via a symlink attack...
SUSE CVE-2022-1004
Accounted time is shown in the Ticket Detail View External Interface, even if ExternalFrontend::TicketDetailViewAccountedTimeDisplay is disabled...
OTRS Multiple Vulnerabilities (OSA-2022-06, OSA-2022-05)
OTRS is prone to multiple vulnerabilities. This VT has been deprecated as a duplicate of the VT SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
InHand Networks InRouter302 web interface session cookie information disclosure vulnerability
Summary An information disclosure vulnerability exists in the web interface session cookie functionality of InHand Networks InRouter302 V3.5.4. The session cookie misses the HttpOnly flag, making it accessible via JavaScript and thus allowing an attacker, able to perform an XSS attack, to steal t...
CVE-2022-1004
Accounted time is shown in the Ticket Detail View External Interface, even if ExternalFrontend::TicketDetailViewAccountedTimeDisplay is disabled...
CVE-2022-1004
CVE-2022-1004 affects OTRS and concerns an information disclosure where the Billing Time ExternalFrontend::TicketDetailView###AccountedTimeDisplay setting is shown in the Ticket Work Order details view even if the display is disabled. Multiple sources corroborate this, including NVD and CVE recor...
CVE-2021-1004
creationtimestamp| type| source ---|---|--- 2021-12-15 22:35:20+00:00| seen| https://t.me/cibsecurity/34061...
CVE-2021-1004
CVE-2021-1004 affects Android 12, via a missing permission check in getConfiguredNetworks() of WifiServiceImpl.java that can allow an app to determine whether another app is installed without query permissions. This is a local privilege escalation (no user interaction required) per the descriptio...
CVE-2021-35198
NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier allows Stored Cross-Site Scripting XSS in the Packet Analysis module...
CVE-2021-35198
NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier allows Stored Cross-Site Scripting XSS in the Packet Analysis module...
