204 matches found
CVE-2020-3153
CVE-2020-3153 Cisco AnyConnect Secure Mobility Client EoP PoC Thanks to Yorick Koster for publishing details. This is a proof of concept for a path traversal vulnerability in Cisco AnyConnect Secure Mobility Client. Tested with Windows 7 and Windows 10 and AnyConnect version 4.5.x and 4.6.x. For...
CVE-2026-79797 Improper Access Control in HPE Networking ClearPass Android Client Application
An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by untrusted sources. Successful exploitation could allow an unauthenticated remote attacker, with user interaction, to...
CVE-2026-79797 Improper Access Control in HPE Networking ClearPass Android Client Application
An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by untrusted sources. Successful exploitation could allow an unauthenticated remote attacker, with user interaction, to...
CVE-2026-79797
An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager . This flaw allows application functionality to be invoked by untrusted sources, potentially enabling an unauthenticated remote attacker to obtain sensitive information fr...
CVE-2026-101271
OAuth credentials access tokens are valid for the entirety of their lifetime, even if the application OAuth client they are bound to is manually disabled...
CVE-2026-87121 Out-of-bounds write in lwIP TCP/IP Stack MQTT Client Application
lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution on the device...
CVE-2026-87121
The lwIP TCP/IP Stack MQTT Client Application is vulnerable to an out-of-bounds write , which could allow an attacker to achieve full code execution on the affected device. While no specific software version or root cause is provided, the vulnerability has been observed in the wild, with sighting...
CVE-2026-87121 Out-of-bounds write in lwIP TCP/IP Stack MQTT Client Application
lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution on the device...
lwIP TCP/IP Stack MQTT Client Application
ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to gain full code execution on the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for all...
CVE-2026-78546 Out-of-Bounds Read
Out-of-bounds read vulnerability in Citirx Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.11 Current Release CR, before 2507.1 LTSR CU3, and before LTSR 2607...
EUVD-2026-75753
A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges...
CVE-2026-11813
A potential improper permissions vulnerability was reported in the Lenovo Filez Client application that could allow a local authenticated user to escalate privileges...
CVE-2026-19002
The CVE-2026-19002 entry affects the MongoDB BI Connector ODBC Driver. A missing bounds check during parsing of stored procedure parameter metadata can cause an out-of-bounds write in the client process, leading to memory corruption and potential abnormal termination or, under certain conditions,...
CVE-2026-19002 Crafted database metadata may cause memory corruption in MongoDB BI Connector ODBC Driver
A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application process. Triggering this issue requires control over the server the driver connects to, or the ability to respond in its...
MAL-2026-7073 Malicious code in @gs-select/savings-client-application (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @gs-select/savings-client-application (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2026-8637
A potential uncontrolled search path vulnerability was reported in the LanSchool Classic client application that could allow a local authenticated user to execute arbitrary code with elevated privileges...
CVE-2026-11815
An attacker who intercepts and tampers with traffic between the client application and the API Gateway server could potentially deserialize arbitrary objects. This vulnerability could lead to broken security expectations or remote code execution...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write while decoding header names. An attacker can achieve memory corruption and potentially execute arbitrary code by sending specially crafted event-stream messages to a client application. Remediation A fix was pushed...