17846 matches found
Design/Logic Flaw
Rejected reason: CVE-2023-4705 was wrongly assigned to a bug that was deemed to be a non-security issue by the Linux kernel security team...
Design/Logic Flaw
Use after free vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code...
Design/Logic Flaw
PendingIntent hijacking in LmsAssemblyTrackerCTC prior to SMR Sep-2023 Release 1 allows local attacker to gain arbitrary file access...
Design/Logic Flaw
Use after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
Design/Logic Flaw
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV...
Design/Logic Flaw
Improper Handling of Exceptional Conditions vulnerability in Daurnimator lua-http library allows Excessive Allocation and a denial of service DoS attack to be executed by sending a properly crafted request to the server. This issue affects lua-http: all versions before commit ddab283...
Design/Logic Flaw
Cerebrate before 1.15 lacks the Secure attribute for the session cookie...
Design/Logic Flaw
Transient DOS in WLAN firmware while parsing MLO multi-link operation...
Design/Logic Flaw
Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame...
Design/Logic Flaw
Transient DOS in Modem while processing RRC reconfiguration message...
Huawei HarmonyOS Security Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a flawed vulnerability introduced during the design process of the module. Successful...
The vulnerability of the 3D viewing tool JT JT2Go, the Product Lifecycle Management system Teamcenter Visualization, and the design tool suite lies in the ability to write code outside the buffer memory, allowing attackers to execute arbitrary code.
The vulnerability of the 3D viewing tool JT/JT2Go, part of the Teamcenter Visualization product lifecycle management system, lies in the ability to write data beyond the buffer limit in memory. Exploiting this vulnerability could allow attackers to execute arbitrary code by introducing a speciall...
Design/Logic Flaw
Use After Free in GitHub repository gpac/gpac prior to 2.3-DEV...
Design/Logic Flaw
Use After Free in GitHub repository vim/vim prior to 9.0.1857...
Design/Logic Flaw
Use After Free in GitHub repository vim/vim prior to 9.0.1858...
Design/Logic Flaw
In imgsyscmdq, there is a possible use after free due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07340433; Issue ID: ALPS07340350...
Design/Logic Flaw
Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833...
Design/Logic Flaw
Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847...
Design/Logic Flaw
A vulnerability that poses a potential risk of polluting the MXsecurity sqlite database and the nsm-web UI has been identified in MXsecurity versions prior to v1.0.1. This vulnerability might allow an unauthenticated remote attacker to register or add devices via the nsm-web application...