17093 matches found
Design/Logic Flaw
Cobbler before 3.3.0 allows arbitrary file write operations via uploadlogdata...
Design/Logic Flaw
CdrCore.dll in Corel DrawStandard 2020 22.0.0.474 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue...
Design/Logic Flaw
IPPP82.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue...
Getting to Know Cybersecurity Awareness Month Champion: Imperva
As a cybersecurity industry leader, it is both our responsibility and our pleasure to work with the National Cyber Security Alliance NCSA and the Cybersecurity and Infrastructure Agency CISA of the U.S. Department of Homeland Security as a 2021 Cybersecurity Awareness Month Champion and to join...
Design/Logic Flaw
libieciccpmod v1.5 contains a segmentation violation in the component serverexample1.c...
[SECURITY] Fedora 33 Update: libspf2-1.2.11-1.20210922git4915c308.fc33
libspf2 is an implementation of the SPF Sender Policy Framework specification as found at: http://www.ietf.org/internet-drafts/draft-mengwong-spf-00.txt SPF allows email systems to check SPF DNS records and make sure that an email is authorized by the administrator of the domain name that it is...
UPchieve: Outdated Copyright Message @ Welcome email
POC : Description : Outdated Copyright is present @ Welcome to UPchieve! email which is of years "2020" Impacted Security Property : Integrity ASVS Categories : Architecture , Design and Threat Modeling POC email and video : Gmail - Welcome to UPchieve!.pdf and recording-1632912432386.webm...
handsontable 安全漏洞
Handsontable is a JavaScript data grid component for web applications from the Polish Handsoncode team. A security vulnerability exists in handsontable that arises from improper design or implementation during code development of a web system or product...
ZOHO ManageEngine ADManager Plus Code Execution Vulnerability
ZOHO ManageEngine ADManager Plus is a Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and help desk technicians with day-to-day administrative tasks, such as bulk management of user accounts and A...
First lp provider in Index Pool is vulnerable to MEV
Handle broccoli Vulnerability details Impact In the IndexPool contract, the first lp providers have to deposit the same amount of tokens. This creates arbitrage space. If the deployer tries to deploy a BTC/DAI pool. S/He has to initialize the BTC pool with BTC price = 1. I consider this is a...
Design/Logic Flaw
Nagios XI before 5.8.5 incorrectly allows manageservices.sh wildcards...
FrogCMS File Upload Vulnerability
FrogCMS an open source content management system. FrogCMS file upload vulnerability exists, the vulnerability is due to product design flaws do not limit the file upload, an attacker can use this vulnerability to upload malicious files to remotely execute arbitrary code...
Design/Logic Flaw
nltk is vulnerable to Inefficient Regular Expression Complexity...
Design/Logic Flaw
jsoneditor is vulnerable to Inefficient Regular Expression Complexity...
ZOHO ManageEngine ADManager Plus 代码问题漏洞
ZOHO ManageEngine ADManager Plus is a Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and help desk technicians with day-to-day administrative tasks, such as bulk management of user accounts and A...
Design/Logic Flaw
Ping Identity PingAccess before 5.3.3 allows HTTP request smuggling via header manipulation...
Design/Logic Flaw
The vulnerability allows a successful attacker to bypass the integrity check of FW uploaded to the free@home System Access Point...
Design/Logic Flaw
IBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 196346...
FrogCMS 代码问题漏洞
FrogCMS an open source content management system. FrogCMS file upload vulnerability exists, the vulnerability is due to product design flaws do not limit the file upload, an attacker can use this vulnerability to upload malicious files to remotely execute arbitrary code...
http4s 注入漏洞
http4s is an open source streaming HTTP server for Scala. http4s suffers from an injection vulnerability that arises from improper design or implementation during code development of a network system or product...