CVE-2021-31431

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

CVE-2024-13189

CVE-2024-13189 affects ZeroWdd myblog 1.0. The vulnerability targets an unknown portion of src/main/java/com/wdd/myblog/config/MyBlogMvcConfig.java, causing permission issues that enable remote exploitation. The exploit has been publicly disclosed. Interim mitigation (where described in the provi...

CVE-2021-31431

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

CVE-2021-31431

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

CVE-2021-31431

The CVE-2021-31431 entry affects Parallels Desktop 15.1.5-47309, specifically the IDE virtual device. The vulnerability stems from improper validation of user-supplied data in the IDE virtual device, causing an information disclosure via a read past the end of an allocated buffer. An attacker mus...

CVE-2020-13189

CVE-2020-13189 entry is rejected/not used and does not represent an active vulnerability.

CVE-2019-13189

Knowage up to version 6.1.1 is vulnerable to a Cross-Site Scripting (XSS) flaw that can be triggered via the start_url or user_id parameter targeting the ChangePwdServlet. The issue stems from insufficient validation of client-side data, enabling an attacker to inject and execute script in the us...

CVE-2018-13189

The CVE-2018-13189 case concerns a smart contract in Unolabo (UNLB) where the mint function contains an integer overflow. This vulnerability could allow the contract owner to set an arbitrary user’s balance to any value. Documents confirm the affected component is the mint function in Unolabo’s E...

CVE-2017-13189

CVE-2017-13189 concerns Android's media framework (libavc) and a memory-allocation failure in dec_hdl handling. Affected Android versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. The CVSS indicates HIGH severity with network access and no user interaction. The description notes a DoS impact; no details on s...