17063 matches found
Design/Logic Flaw
Use after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
Design/Logic Flaw
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV...
Design/Logic Flaw
Improper Handling of Exceptional Conditions vulnerability in Daurnimator lua-http library allows Excessive Allocation and a denial of service DoS attack to be executed by sending a properly crafted request to the server. This issue affects lua-http: all versions before commit ddab283...
Design/Logic Flaw
Transient DOS in WLAN firmware while parsing MLO multi-link operation...
Design/Logic Flaw
Cerebrate before 1.15 lacks the Secure attribute for the session cookie...
Design/Logic Flaw
Transient DOS in Modem while processing RRC reconfiguration message...
Design/Logic Flaw
Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame...
Huawei HarmonyOS Security Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a flawed vulnerability introduced during the design process of the module. Successful...
The vulnerability of the 3D viewing tool JT JT2Go, the Product Lifecycle Management system Teamcenter Visualization, and the design tool suite lies in the ability to write code outside the buffer memory, allowing attackers to execute arbitrary code.
The vulnerability of the 3D viewing tool JT/JT2Go, part of the Teamcenter Visualization product lifecycle management system, lies in the ability to write data beyond the buffer limit in memory. Exploiting this vulnerability could allow attackers to execute arbitrary code by introducing a speciall...
Design/Logic Flaw
Use After Free in GitHub repository vim/vim prior to 9.0.1858...
Design/Logic Flaw
Use After Free in GitHub repository gpac/gpac prior to 2.3-DEV...
Design/Logic Flaw
Use After Free in GitHub repository vim/vim prior to 9.0.1857...
Design/Logic Flaw
In imgsyscmdq, there is a possible use after free due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07340433; Issue ID: ALPS07340350...
Design/Logic Flaw
Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833...
Design/Logic Flaw
Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847...
Design/Logic Flaw
A vulnerability that poses a potential risk of polluting the MXsecurity sqlite database and the nsm-web UI has been identified in MXsecurity versions prior to v1.0.1. This vulnerability might allow an unauthenticated remote attacker to register or add devices via the nsm-web application...
Design/Logic Flaw
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV...
Design/Logic Flaw
An issue in hjson-java up to v3.0.0 allows attackers to cause a Denial of Service DoS via supplying a crafted JSON string...
Design/Logic Flaw
An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and...
Design/Logic Flaw
An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See Instruction Manual Appendix A and...