9015 matches found
Design/Logic Flaw
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV...
Design/Logic Flaw
Improper Handling of Exceptional Conditions vulnerability in Daurnimator lua-http library allows Excessive Allocation and a denial of service DoS attack to be executed by sending a properly crafted request to the server. This issue affects lua-http: all versions before commit ddab283...
Design/Logic Flaw
Cerebrate before 1.15 lacks the Secure attribute for the session cookie...
Design/Logic Flaw
Transient DOS in WLAN firmware while parsing MLO multi-link operation...
Design/Logic Flaw
Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame...
Design/Logic Flaw
Transient DOS in Modem while processing RRC reconfiguration message...
Huawei HarmonyOS Security Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a flawed vulnerability introduced during the design process of the module. Successful...
Design/Logic Flaw
Use After Free in GitHub repository vim/vim prior to 9.0.1858...
Design/Logic Flaw
Use After Free in GitHub repository vim/vim prior to 9.0.1857...
Design/Logic Flaw
Use After Free in GitHub repository gpac/gpac prior to 2.3-DEV...
Design/Logic Flaw
In imgsyscmdq, there is a possible use after free due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07340433; Issue ID: ALPS07340350...
Design/Logic Flaw
Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833...
Design/Logic Flaw
Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847...
Design/Logic Flaw
A vulnerability that poses a potential risk of polluting the MXsecurity sqlite database and the nsm-web UI has been identified in MXsecurity versions prior to v1.0.1. This vulnerability might allow an unauthenticated remote attacker to register or add devices via the nsm-web application...
Design/Logic Flaw
An issue in hjson-java up to v3.0.0 allows attackers to cause a Denial of Service DoS via supplying a crafted JSON string...
Design/Logic Flaw
An Incomplete Filtering of Special Elements vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated...
Design/Logic Flaw
Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...
Design/Logic Flaw
An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and...
Design/Logic Flaw
The WooCommerce PDF Invoice Builder for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the GetInvoiceDetail function in versions up to, and including, 1.2.89. This makes it possible for subscribers to view arbitrary invoices provided they can guess the...