17600 matches found
Design/Logic Flaw
The RDPCore.dll component as used in the IRM Next Generation booking engine, allows a remote user to connect to customers with an "admin" account and a corresponding password computed daily by a routine inside the DLL file. Once reverse-engineered, this routine can help an attacker generate the...
Cybercriminals target graphic designers with GPU miners
Cybercriminals are abusing Advanced Installer, a legitimate Windows tool used for creating software packages, to drop cryptocurrency-mining malware on infected machines. This activity has been ongoing since at least November 2021. The attacker uses Advanced Installer to package other legitimate...
Information disclosure through insecure design
Introduction Insecure design can lead to many issues. The Software Development Life Cycle SDLC should contain steps to evaluate and consider security throughout the process. Several recent web application and API tests have revealed a common issue of responses containing too much data, and leakin...
Design/Logic Flaw
The Duplicate Post Page Menu & Custom Post Type plugin for WordPress is vulnerable to unauthorized page and post duplication due to a missing capability check on the duplicateppmcpostasdraft function in versions up to, and including, 2.3.1. This makes it possible for authenticated attackers with...
Design/Logic Flaw
Tenda N300 Wireless N VDSL2 Modem Router allows unauthenticated access to pages that in turn should be accessible to authenticated users only...
Design/Logic Flaw
Archer C3150 firmware versions prior to 'Archer C3150JPV2230511' allows a network-adjacent authenticated attacker to execute arbitrary OS commands...
Design/Logic Flaw
Archer C1200 firmware versions prior to 'Archer C1200JPV2230508' and Archer C9 firmware versions prior to 'Archer C9JPV3230508' allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands...
Design/Logic Flaw
Rejected reason: CVE-2023-4705 was wrongly assigned to a bug that was deemed to be a non-security issue by the Linux kernel security team...
Design/Logic Flaw
Use after free vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code...
Design/Logic Flaw
PendingIntent hijacking in LmsAssemblyTrackerCTC prior to SMR Sep-2023 Release 1 allows local attacker to gain arbitrary file access...
Design/Logic Flaw
Use after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
Design/Logic Flaw
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV...
Design/Logic Flaw
Improper Handling of Exceptional Conditions vulnerability in Daurnimator lua-http library allows Excessive Allocation and a denial of service DoS attack to be executed by sending a properly crafted request to the server. This issue affects lua-http: all versions before commit ddab283...
Design/Logic Flaw
Cerebrate before 1.15 lacks the Secure attribute for the session cookie...
Design/Logic Flaw
Transient DOS in WLAN firmware while parsing MLO multi-link operation...
Design/Logic Flaw
Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame...
Design/Logic Flaw
Transient DOS in Modem while processing RRC reconfiguration message...
Huawei HarmonyOS Security Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a flawed vulnerability introduced during the design process of the module. Successful...
The vulnerability of the 3D viewing tool JT JT2Go, the Product Lifecycle Management system Teamcenter Visualization, and the design tool suite lies in the ability to write code outside the buffer memory, allowing attackers to execute arbitrary code.
The vulnerability of the 3D viewing tool JT/JT2Go, part of the Teamcenter Visualization product lifecycle management system, lies in the ability to write data beyond the buffer limit in memory. Exploiting this vulnerability could allow attackers to execute arbitrary code by introducing a speciall...