9619 matches found
Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite (cisco-sa-sdwan-fileoverwrite-Uc9tXWH)
According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of...
PYSEC-2025-242
FastAPI Guard is a security library for FastAPI that provides middleware to control IPs, log requests, and detect penetration attempts. An HTTP header injection vulnerability has been identified in versions prior to 2.0.0. By manipulating the X-Forwarded-For header, an attacker can potentially...
PYSEC-2025-242
FastAPI Guard is a security library for FastAPI that provides middleware to control IPs, log requests, and detect penetration attempts. An HTTP header injection vulnerability has been identified in versions prior to 2.0.0. By manipulating the X-Forwarded-For header, an attacker can potentially...
CVE-2025-46814 FastAPI Guard Remote Header Injection via X-Forwarded-For Manipulation
FastAPI Guard is a security library for FastAPI that provides middleware to control IPs, log requests, and detect penetration attempts. An HTTP header injection vulnerability has been identified in versions prior to 2.0.0. By manipulating the X-Forwarded-For header, an attacker can potentially...
CVE-2024-49830
Memory corruption while processing an IOCTL call to set mixer controls...
CVE-2024-49830
Memory corruption while processing an IOCTL call to set mixer controls...
CVE-2024-49830 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio
Memory corruption while processing an IOCTL call to set mixer controls...
CVE-2024-49830 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio
Memory corruption while processing an IOCTL call to set mixer controls...
CVE-2024-49830
CVE-2024-49830 describes memory corruption that occurs when processing an IOCTL call to set mixer controls on Qualcomm chipsets. The vulnerability affects the mixer-control handling path (IOCTL processing) and is supported by multiple feeds (NVD/RH/CVE list) with CVSSv3.1 base scores indicating h...
CVE-2024-49830: Buffer Copy without Checking Size of Input
Memory corruption while processing an IOCTL call to set mixer controls...
PT-2025-19860 · Qualcomm · Snapdragon +12
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption that occurs when processing an IOCTL call to set mixer controls. This can be described in Spanish as corrupción de memoria al procesar una llamada IOCTL...
CVE-2025-4269
A vulnerability was found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/cstecgi.cgi of the component Log Handler. The manipulation of the argument topicurl with the input clearDiagnosisLog/clearSyslog/clearTracerouteLog...
CVE-2025-4269
CVE-2025-4269 affects TOTOLINK A720R 4.1.5cu.374, specifically the Log Handler’s file /cgi-bin/cstecgi.cgi. Manipulating the topicurl parameter with input values like clearDiagnosisLog/clearSyslog/clearTracerouteLog results in improper access controls, potentially enabling remote exploitation. Mu...
CVE-2022-49933
No description is available for this CVE...
CVE-2025-46631
Improper access controls in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to enable telnet access to the router's OS by sending a /goform/telnet web request...
CVE-2025-46629
Lack of access controls in the 'ate' management binary of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to perform unauthorized configuration changes for any router where 'ate' has been enabled by sending a crafted UDP packet...
CVE-2022-49933
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2022-49933
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...