CVE-2025-14286 Tenda AC9 Configuration File DownloadCfg.jpg information disclosure

A vulnerability was determined in Tenda AC9 15.03.05.14multi. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/DownloadCfg.jpg of the component Configuration File Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The...

CVE-2019-14286

In app/webroot/js/event-graph.js in MISP 2.4.111, a stored XSS vulnerability exists in the event-graph view when a user toggles the event graph view. A malicious MISP event must be crafted in order to trigger the vulnerability...

CVE-2019-14286

The CVE-2019-14286 entry documents a stored cross-site scripting (XSS) vulnerability in MISP 2.4.111, located in app/webroot/js/event-graph.js for the event-graph view. An attacker must craft a malicious MISP event to trigger the vulnerability when the event-graph view is toggled. The available c...

CVE-2018-14286

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-14286

Foxit Reader: CVE-2018-14286 is a type-confusion remote-code-execution vulnerability in the mailDoc argument handling. It affects Foxit Reader 9.0.1.1049 and earlier; exploitation requires user interaction (visiting a malicious page or opening a malicious file). Root cause: improper validation of...

Samsung SmartThings Hub video-core HTTP server buffer overflow vulnerability (CNVD-2018-14286)

Samsung SmartThings Hub is a smart home management device from Samsung, South Korea. video-core HTTP server is one of the HTTP servers. A buffer overflow vulnerability exists in the camera 'replace' function of the video-core HTTP server in the Samsung SmartThings Hub, which originates from the...

CVE-2017-14286

STDU Viewer 1.6.375 is affected by CVE-2017-14286. A vulnerability in processing specially crafted .jb2 files can lead to arbitrary code execution or a denial of service, related to a User Mode Write AV originating from STDUJBIG2File!DllUnregisterServer+0xcb8c. The issue is a buffer/write conditi...