9 matches found
EUVD-2023-51506
Malicious code in bioql PyPI...
EUVD-2022-24584
Malicious code in bioql PyPI...
CVE-2024-40405
Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a secondary broker via a crafted request...
D-Link DIR-845 安全漏洞
The D-Link DIR-845L is a wireless router from China-based AUO D-Link. The D-Link DIR-845L suffers from a command execution vulnerability that can be exploited by an attacker to execute arbitrary commands on the system by sending a specially crafted request...
Cisco Small Business 缓冲区错误漏洞
Cisco Small Business is a switch from the American company Cisco Cisco. A buffer overflow vulnerability exists in the Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers, which stems from insufficient authentication of the user field in incoming HTTP packets. An attacker could exploit...
Unspecified Vulnerability in CloudBees Jenkins Dynatrace Application Monitoring Plugin
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Dynatrace Application Monitoring Plugin is us...
Microsoft Windows 'Win32k.sys' Local Information Disclosure Vulnerability
Microsoft Windows is the popular operating system. Microsoft Windows Win32k does not properly handle memory objects, allowing an attacker to exploit a vulnerability by submitting a special request that could obtain sensitive information...
IBM Kenexa LCMS Premier on Cloud Information Disclosure Vulnerability (CNVD-2017-01326)
IBM Kenexa LCMS Premier on Cloud is an adjustable Learning Content Management System LCMS for developing, maintaining, and delivering effective employee training from IBM USA. A security vulnerability exists in IBM Kenexa LCMS Premier on Cloud. An attacker could exploit the vulnerability by sendi...
CVE-2014-8384
The InFocus IN3128HD projector with firmware 0.26 does not restrict access to cgi-bin/webctrl.cgi.elf, which allows remote attackers to modify the DHCP server and device IP configuration, reboot the device, change the device name, and have other unspecified impact via a crafted request...