6145 matches found
CVE-2022-25456
Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the security5g parameter in the WifiBasicSet function...
CVE-2022-25456
Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the security5g parameter in the WifiBasicSet function...
CVE-2022-1002: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Mattermost 6.3.0 and earlier fails to properly sanitize the HTML content in the email invitation sent to guest users, which allows registered users with special permissions to invite guest users to inject unescaped HTML content in the email invitations...
Format string
The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm formerly Fuji Xerox devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization...
CVE-2022-26320
The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm formerly Fuji Xerox devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization...
CVE-2022-26320: Use of Insufficiently Random Values
The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm formerly Fuji Xerox devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generates RSA keys that can be broken with Fermat's factorization...
HP PC security vulnerabilities
HP PC is a computer product of Hewlett-Packard HP Company, USA. A security vulnerability exists in the HP PC BIOS that allows privilege escalation, arbitrary code execution, unauthorized code execution, denial of service, and information disclosure...
DEBIAN-CVE-2021-3733
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client such as web browser connects to, could trigger a Regular Expression Denial of Service ReDOS during an authentication request with a specially crafted payload that is sen...
Microsoft Visual Basic Office Information Disclosure
The vulnerability of the Microsoft Visual Basic development environment and the Microsoft Office suite is related to the disclosure of sensitive information in error-prone data areas. Exploiting this vulnerability can allow attackers to disclose protected information...
ruby: BasicSocket#read_nonblock method leads to information disclosure
An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocketreadnonblockrequestedsize, buffer, exception: false, the method resizes the buffer to fit the requested size, but no data is copied. Thus, the buffer string provides the previous valu...
Denial Of Service (DoS)
Brandy is vulnerable to denial of service. An attacker can cause a heap-based buffer overflow in definearray in variables.c via crafted BASIC source code...
Out-of-bounds Write
Brandy is vulnerable to an out-of-bounds write. This is caused by the fileioopenout function in fileio.c receiving a malicious string via crafted BASIC source code...
net.mingsoft:ms-mdiy (1.0.8), net.mingsoft:ms-mpay (1.0.3) +2 more potentially affected by CVE-2021-46062 via net.mingsoft:ms-basic (1.0.9)
net.mingsoft:ms-basic MAVEN version 1.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mdiy 1.0.8 - net.mingsoft:ms-mpay 1.0.3 - net.mingsoft:ms-mpeople 1.0.8 - net.mingsoft:ms-mweixin 1.0...
net.mingsoft:ms-mattention (1.0.4), net.mingsoft:ms-mcms (5.1) +7 more potentially affected by CVE-2021-46062 via net.mingsoft:ms-basic (1.0.31)
net.mingsoft:ms-basic MAVEN version 1.0.31 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mattention 1.0.4 - net.mingsoft:ms-mcms 5.1 - net.mingsoft:ms-mcomment 1.0.4 - net.mingsoft:ms-mdiy...
net.mingsoft:ms-datascope (1.0.0), net.mingsoft:ms-id (1.0.1) +9 more potentially affected by CVE-2021-46062 via net.mingsoft:ms-basic (1.0.28)
net.mingsoft:ms-basic MAVEN version 1.0.28 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-datascope 1.0.0 - net.mingsoft:ms-id 1.0.1 - net.mingsoft:ms-init 1.0.0 - net.mingsoft:ms-mactiviti...
net.mingsoft:ms-mdiy (>=1.0.25, <=1.0.26), net.mingsoft:ms-mpeople (1.0.31) potentially affected by CVE-2021-46062 via net.mingsoft:ms-basic (1.0.34)
net.mingsoft:ms-basic MAVEN version 1.0.34 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mdiy =1.0.25, =1.0.26 - net.mingsoft:ms-mpeople 1.0.31 Source cves: CVE-2021-46062 Source advisory:...
net.mingsoft:ms-mdiy (1.0.27), net.mingsoft:ms-mpeople (1.0.32) +1 more potentially affected by CVE-2021-46062 via net.mingsoft:ms-basic (1.0.35)
net.mingsoft:ms-basic MAVEN version 1.0.35 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mdiy 1.0.27 - net.mingsoft:ms-mpeople 1.0.32 - net.mingsoft:store-client 5.2.0.release Source cves:...
net.mingsoft:ms-mcms (>=4.6.3-snapshots, <=4.6.5), net.mingsoft:ms-mdiy (1.0.16) +7 more potentially affected by CVE-2021-46062 via net.mingsoft:ms-basic (1.0.21)
net.mingsoft:ms-basic MAVEN version 1.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mcms =4.6.3-snapshots, =4.6.5 - net.mingsoft:ms-mdiy 1.0.16 - net.mingsoft:ms-mlic-client 1.0.3 -...
net.mingsoft:ms-mcms (5.2), net.mingsoft:ms-mpeople (1.0.29) +1 more potentially affected by CVE-2021-46062 via net.mingsoft:ms-basic (1.0.32)
net.mingsoft:ms-basic MAVEN version 1.0.32 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mcms 5.2 - net.mingsoft:ms-mpeople 1.0.29 - net.mingsoft:ms-msend 1.0.12 Source cves: CVE-2021-46062...
net.mingsoft:ms-mdiy (1.0.20), net.mingsoft:ms-mpeople (1.0.24) potentially affected by CVE-2021-46062 via net.mingsoft:ms-basic (1.0.29)
net.mingsoft:ms-basic MAVEN version 1.0.29 is affected by a known vulnerability. The following packages have a transitive dependency on net.mingsoft:ms-basic and may be impacted: - net.mingsoft:ms-mdiy 1.0.20 - net.mingsoft:ms-mpeople 1.0.24 Source cves: CVE-2021-46062 Source advisory:...