17063 matches found
Design/Logic Flaw
An issue was discovered in Veritas InfoScale Operations Manager VIOM before 7.4.2.800 and 8.x before 8.0.410. The VIOM web application does not validate user-supplied data and appends it to OS commands and internal binaries used by the application. An attacker with root/administrator level...
Design/Logic Flaw
Insufficient address validation, may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory locations potentially resulting in a loss of integrity or availability...
Design/Logic Flaw
An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjsexecute function in mjs.c...
Design/Logic Flaw
An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgpcapabilityllgr function...
Design/Logic Flaw
An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgpattrpsidsub function...
Design/Logic Flaw
An issue found in libming v.0.4.8 allows a local attacker to execute arbitrary code via the parseSWFIMPORTASSETS function in the parser.c file...
Design/Logic Flaw
Insecure Permissons vulnerability found in ShopCMS YerShop all versions allows a remote attacker to escalate privileges via the coverid parameter...
Design/Logic Flaw
A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 All versions = V2.0 = V2.0 V2.1. The export endpoint discloses some undocumented files. This could allow an unauthenticated remote attacker to gain access to additional information resources...
Design/Logic Flaw
yasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c...
Design/Logic Flaw
yasm v1.3.0 was discovered to contain a use after free via the function ppgetline at /nasm/nasm-pp.c...
Design/Logic Flaw
In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges...
Design/Logic Flaw
In engineermode service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges...
Design/Logic Flaw
An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of service via the appendvfs.c function...
Design/Logic Flaw
In SAP AS NetWeaver JAVA - versions SERVERCORE 7.50, J2EE-FRMW 7.50, CORE-TOOLS 7.50, an unauthenticated attacker can attach to an open interface and make use of an open naming and directory API to instantiate an object which has methods which can be called without further authorization and...
Design/Logic Flaw
In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges...
CVE-2023-28764
SAP BusinessObjects Platform - versions 420, 430, Information design tool transmits sensitive information as cleartext in the binaries over the network. This could allow an unauthenticated attacker with deep knowledge to gain sensitive information such as user credentials and domain names, which...
Design/Logic Flaw
OpenProject is open source project management software. Starting with version 7.4.0 and prior to version 12.5.4, when a user registers and confirms their first two-factor authentication 2FA device for an account, existing logged in sessions for that user account are not terminated. Likewise, if a...
Design/Logic Flaw
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. A user may gain access to protected parts of the file system...
Design/Logic Flaw
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to execute arbitrary code with kernel privileges...