EUVD-2026-34899

A hard-coded cryptographic key is used by Altium Enterprise Server to sign file download URLs in the Vault service. Because the key is identical across all installations, an unauthenticated network attacker who can reach the server can forge valid download signatures and retrieve files from the...

ECHO-D2DB-9152-3E07

Bulletin has no description...

CVE-2025-9152

An improper privilege management vulnerability exists in WSO2 API Manager due to missing authentication and authorization checks in the keymanager-operations Dynamic Client Registration DCR endpoint. A malicious user can exploit this flaw to generate access tokens with elevated privileges,...

Siemens Mobility Trainguard End-of-Train and Head-of-Train Weak Authentication Vulnerability

The Trainguard End-of-Train EOT is a new generation of end-of-train devices for connecting on-board telemetry.The Trainguard Head-of-Train HOT is a front-of-train device. These devices communicate using the S-9152 standard. A weak authentication vulnerability exists in Siemens Mobility Trainguard...

Linux Distros Unpatched Vulnerability : CVE-2019-9152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5MMxstrdup in H5MM.c when called from H5Odtypedecodehelp...

CVE-2014-9152

The userresourcecreate function in the Services module 7.x-3.x before 7.x-3.10 for Drupal uses a password of 1 when creating new user accounts, which makes it easier for remote attackers to guess the password via a brute force attack...

Linux Distros Unpatched Vulnerability : CVE-2017-9152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the pnmloadraw function in input-pnm.c:346:41. CVE-2017-9152 Note that Nessus relies on...

SUSE CVE-2019-9152

An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5MMxstrdup in H5MM.c when called from H5Odtypedecodehelper in H5Odtype.c...

CVE-2019-9152

CVE-2019-9152 affects the HDF5 library (HDF5 1.10.4). The issue is an out-of-bounds read in H5MM_xstrdup within H5MM.c, triggered from H5O_dtype_decode_helper in H5Odtype.c. Impact is described as a read beyond bounds, with references noting potential information disclosure from this condition. M...

CVE-2015-9152

The CVE-2015-9152 issue affects Android devices using certain Qualcomm Snapdragon modem/SoC families (e.g., IPQ4019, SD 210/212/205, 400, 410/12, 425, 427, 430, 435, 450, 615/16/415, 625, 800, 810, 820/820A, 835, Snapdragon_High_Med_2016) where modem-owned regions can be reached from the secure s...

CVE-2017-9152

CVE-2017-9152 affects AutoTrace 0.31.1 where libautotrace.a contains a heap-based buffer over-read in pnm_load_raw (input-pnm.c:346:41). This is documented across multiple feeds (NVD entry) with a high/critical impact (network attack via crafted input) and no explicit fix/version update details p...

CVE-2016-9152

Cross-site scripting XSS vulnerability in ecrire/exec/plonger.php in SPIP 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the rac parameter...

CVE-2016-9152

Cross-site scripting XSS vulnerability in ecrire/exec/plonger.php in SPIP 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the rac parameter...

CVE-2016-9152

Cross-site scripting XSS vulnerability in ecrire/exec/plonger.php in SPIP 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the rac parameter...

CVE-2016-9152

CVE-2016-9152 concerns SPIP 3.1.3, where an XSS flaw exists in the file ecrire/exec/plonger.php that allows remote attackers to inject arbitrary web script or HTML via the rac parameter. The connected records establish the affected software and vulnerable parameter, with exploitation details not ...

CVE-2016-9152

Cross-site scripting XSS vulnerability in ecrire/exec/plonger.php in SPIP 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the rac parameter...

CVE-2014-9152

CVE-2014-9152 affects the Drupal Services module (7.x-3.x) prior to 7.x-3.10. The _user_resource_create function creates new user accounts with a password of 1, enabling remote attackers to brute-force the password. Impact is partial confidentiality and integrity risk for newly created accounts; ...