17088 matches found
Design/Logic Flaw
Missing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red Hat Enterprise Linux 8.5.0, causes a security regression compared to the versions shipped in Red Hat Enterprise Linux 8.4. A user who installs or updates to Red Hat Enterprise Linux 8.5.0 would be...
Design/Logic Flaw
Scoold 1.47.2 is a Q&A/knowledge base platform written in Java. When writing a Q&A, the markdown editor is vulnerable to a XSS attack when using uppercase letters...
Design/Logic Flaw
Remote Command Execution RCE vulnerability exists in HNAP1/control/SetWizardConfig.php in D-Link Router DIR-846 DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicoius users can use this vulnerability to use "\ " or backticks in the shell metacharacters in the ssid0 or ssid1 parameters...
Design/Logic Flaw
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this...
Design/Logic Flaw
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software...
Design/Logic Flaw
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software...
Design/Logic Flaw
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software...
Design/Logic Flaw
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software...
Design/Logic Flaw
Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2...
Design/Logic Flaw
xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context...
Atlassian Jira Cross-Site Request Forgery Vulnerability (CNVD-2022-16292)
Atlassian Jira is a defect tracking management system from Atlassian Australia. Atlassian Jira is vulnerable to cross-site request forgery, which is caused by improper design or implementation during the development of code for a web-based system or product. No detailed vulnerability details are...
KiCad Eda 缓冲区错误漏洞
KiCad Eda is a cross-platform and open source electronic design automation suite from the KiCad community. KiCad EDA is vulnerable to a buffer overflow vulnerability that could be exploited by an attacker with a specially crafted gerber or excellon file to cause code execution...
Design/Logic Flaw
A missing check in Jenkins dbCharts Plugin 0.5.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified database via JDBC using attacker-specified credentials...
Design/Logic Flaw
CobaltStrike =4.5 HTTPS listener does not determine whether the request URL begins with "/", and attackers can obtain relevant information by specifying the URL...
crossbeam 竞争条件问题漏洞
crossbeam is a tool for individual developers that applies to concurrent programming. A competitive conditions issue vulnerability exists in crossbeam that arises from improper design or implementation during code development of a networked system or product...
Design/Logic Flaw
An issue in the getType function of BBS Forum v5.3 and below allows attackers to upload arbitrary files...
AntD Admin 访问控制错误漏洞
AntD Admin is an excellent front-end solution for enterprise applications built on Ant Design and UmiJs by Zuiidea individual developers. A security vulnerability exists in AntD Admin, which originates from Antd-admin 5.5.0 is affected by a False Access Control vulnerability. An attacker can...
Google Golang memory consumption overflow vulnerability
Google Golang is a statically strongly typed, compiled language from Google, Inc. A memory consumption overflow vulnerability exists in Google Golang, which stems from a design or implementation impropriety in the code development process of a web-based system or product. An attacker could exploi...
Atlassian Jira 跨站请求伪造漏洞
Atlassian Jira is a defect tracking management system from Atlassian Australia. Atlassian Jira is vulnerable to cross-site request forgery, which is caused by improper design or implementation during the development of code for a web-based system or product. No detailed vulnerability details are...