Denial Of Service (DoS)

github.com/vektah/gqlparser is vulnerable to Denial Of Service. The vulnerability is due to improper input handling in the ParseQuery function. An attacker can exploit this by sending a crafted script to cause the parser to crash...

GHSA-2HMF-46V7-V6FX gqlparser denial of service vulnerability via the parserDirectives function

An issue in vektah gqlparser open-source-library v.2.5.10 allows a remote attacker to cause a denial of service via a crafted script to the parserDirectives function...

gqlparser denial of service vulnerability via the parserDirectives function

An issue in vektah gqlparser open-source-library v.2.5.10 allows a remote attacker to cause a denial of service via a crafted script to the parserDirectives function...

CVE-2023-49559

An issue in vektah gqlparser open-source-library v.2.5.10 allows a remote attacker to cause a denial of service via a crafted script to the parserDirectives function...

CVE-2023-49559

An issue in the vektah gqlparser open-source library (v.2.5.10) allows a remote attacker to cause a denial of service (DoS) by sending a crafted script to the parserDirectives function. The vulnerability has a LOW base severity (CVSS 3.1 score of 3.7) with a high attack complexity. Exploitation d...

CVE-2024-35102

Insecure Permissions vulnerability in VITEC AvediaServer Model avsrv-m8105 8.6.2-1 allows a remote attacker to escalate privileges via a crafted script...

CVE-2024-35102

Insecure Permissions vulnerability in VITEC AvediaServer Model avsrv-m8105 8.6.2-1 allows a remote attacker to escalate privileges via a crafted script...

PT-2024-26319

Name of the Vulnerable Software and Affected Versions VITEC AvediaServer Model avsrv-m8105 version 8.6.2-1 Description The issue allows a remote attacker to escalate privileges via a crafted script. This is due to an Insecure Permissions vulnerability. Recommendations For VITEC AvediaServer Model...

CVE-2024-35102: Undefined Security Weakness

Insecure Permissions vulnerability in VITEC AvediaServer Model avsrv-m8105 8.6.2-1 allows a remote attacker to escalate privileges via a crafted script...

VITEC AvediaServer security vulnerability

VITEC AvediaServer is a centralized server from VITEC France. A security vulnerability exists in VITEC AvediaServer version 8.6.2-1, which stems from the presence of an insecure privilege vulnerability that allows remote attackers to escalate privileges via a crafted script...

CVE-2024-33454: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the Bluetooth stack component...

CVE-2024-33454

Buffer Overflow vulnerability in esp-idf v.5.1 allows a remote attacker to execute arbitrary code via a crafted script to the Bluetooth stack component...

Cross Site Scripting (XSS)

Jfinalcms is vulnerable to Cross Site Scripting XSS. The vulnerability is due to improper input validation in the friendship link component, allowing a remote attacker to execute arbitrary code through a crafted script...

CVE-2023-50685

An issue in Hipcam Cameras RealServer v.1.0 allows a remote attacker to cause a denial of service via a crafted script to the clientport parameter...

Hipcam RealServer security vulnerability

Hipcam RealServer is a real-time streaming protocol from Hipcam, Inc. A security vulnerability exists in Hipcam RealServer version v.1.0, which originated from a vulnerability that allows remote attackers to cause a denial of service via a crafted script...

CVE-2023-50685

An issue in Hipcam Cameras RealServer v.1.0 allows a remote attacker to cause a denial of service via a crafted script to the clientport parameter...

CVE-2023-50685

An issue in Hipcam Cameras RealServer v.1.0 allows a remote attacker to cause a denial of service via a crafted script to the clientport parameter...

CVE-2023-50685

Hipcam Cameras RealServer v.1.0 is vulnerable to a denial of service (DoS) attack via a format validation vulnerability in its RTSP service. The root cause is inadequate input validation and handling of the client_port parameter within the RTSP SETUP request . Specifically, the service fails to p...

CVE-2020-27478

Cross Site Scripting vulnerability found in Simplcommerce v.40734964b0811f3cbaf64b6dac261683d256f961 thru 3103357200c70b4767986544e01b19dbf11505a7 allows a remote attacker to execute arbitrary code via a crafted script to the search bar feature...

Simplcommerce security vulnerabilities

Simplcommerce is a .Net based e-commerce platform by the individual developer of Simplcommerce. A security vulnerability exists in Simplcommerce. A remote attacker can exploit the vulnerability to execute arbitrary code in the search bar function via a specially crafted script...