17086 matches found
Design/Logic Flaw
An issue in the handling of environment variables was addressed with improved validation. This issue is fixed in macOS Monterey 12.4. A user may be able to view sensitive user information...
Design/Logic Flaw
This issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges...
CVE-2022-40629 Sensitive Information Disclosure Vulnerability in Tacitine Firewall
This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 inclusive, due to insecure design in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit this vulnerability b...
CVE-2022-40629
The CVE-2022-40629 entry concerns Tacitine Firewall, affecting EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100, versions 19.1.1 through 22.20.1. Root cause: insecure design in the web-based management interface that allows an unauthenticated remote attacker to view sensitive information via a spec...
Design/Logic Flaw
an attacker with knowledge of user/pass of Grandstream GSD3710 in its 1.0.11.13 version, could overflow the stack since it doesn't check the param length before use the strcopy instruction. The explotation of this vulnerability may lead an attacker to execute a shell with full access...
Design/Logic Flaw
This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 inclusive, due to improper control of code generation in the Tacitine Firewall web-based management interface. An unauthenticated remote attacker could exploit...
Design/Logic Flaw
When curl is used to retrieve and parse cookies from a HTTPS server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings...
Design/Logic Flaw
hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function...
Claim can only be created for a recipient once
Lines of code Vulnerability details Claim can only be created for a recipient once The function creating claims, createClaimUnchecked, has the hasNoClaim modifier, that is defined as opposite hasActiveClaim, meaning it reverts if there is an active claim for a user. It reverts if...
Design/Logic Flaw
OTFCC commit 617837b was discovered to contain a segmentation violation via /lib/x8664-linux-gnu/libc.so.6+0xbb384...
Design/Logic Flaw
OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe9a7...
Design/Logic Flaw
OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6b6a8f...
Design/Logic Flaw
OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x5266a8...
Design/Logic Flaw
OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6badae...
Design/Logic Flaw
Use After Free in GitHub repository vim/vim prior to 9.0.0530...
Security Bulletin: Vulnerability in SSLv3 affects TRIRIGA for Energy Optimization (CVE-2014-3566)
Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in TRIRIGA for Energy Optimization previously known as Intelligent Building Management. Vulnerability Details CVE-ID : CVE-2014-3566 DESCRIPTION :...
design-up.org Cross Site Scripting vulnerability OBB-2940593
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Design/Logic Flaw
This issue was addressed with improved checks. This issue is fixed in iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An app may be able to bypass Privacy preferences...