17957 matches found
Design/Logic Flaw
The All-in-One Video Gallery WordPress plugin before 2.5.0 does not sanitise and validate the tab parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue...
Design/Logic Flaw
The CLI 1.0.0 for Amazon AWS OpenSearch has weak permissions for the configuration file...
Fortinet FortiAuthenticator Authentication Bypass Vulnerability
Fortinet FortiAuthenticator, a centralized user identity management solution from Fortinet, Inc. is vulnerable to an authentication bypass vulnerability in version 6.4.0 due to improper design or implementation of the authentication module code. issue. An attacker could exploit this vulnerability...
in dotcms/core
Description Hello, dotCMS has an XXE vulnerability in the template design page. To exploit this flaw, a attacker needs the permission to edit and preview templates, and this can be abused to read internal files Video Poc This section of the documentation explain how to use the XMLTool in the...
Design/Logic Flaw
openwhyd is vulnerable to URL Redirection to Untrusted Site...
Design/Logic Flaw
An issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker may load customized firmware because the bootloader does not verify that it is authentic, changing the behavior of the gateway...
CVE-2021-42759
A violation of secure design principles in Fortinet Meru AP version 8.6.1 and below, version 8.5.5 and below allows attacker to execute unauthorized code or commands via crafted cli commands...
Design/Logic Flaw
A violation of secure design principles in Fortinet Meru AP version 8.6.1 and below, version 8.5.5 and below allows attacker to execute unauthorized code or commands via crafted cli commands...
CVE-2021-42759
A violation of secure design principles in Fortinet Meru AP version 8.6.1 and below, version 8.5.5 and below allows attacker to execute unauthorized code or commands via crafted cli commands...
Design/Logic Flaw
Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Thunderbird 91.4.0, Firefox...
Design/Logic Flaw
PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url=alert1 and stealing cookies...
Design/Logic Flaw
An improper usage of implicit intent in SemRewardManager prior to SMR Dec-2021 Release 1 allows attackers to access BSSID...
Design/Logic Flaw
KNIME Server before 4.13.4 allows XSS via the old WebPortal login page...
Bentley Systems Bentley View buffer error vulnerability
Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View caused by an out-of-bounds read when parsing DGN files, which could be exploited by an attacker to obtain sensitive information...
Bentley Systems Bentley View buffer error vulnerability
Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View, which is caused by an out-of-bounds write when parsing DGN files. An attacker could exploit this vulnerability to execute arbitrary code on the system...
CVE-2021-37059
There is a Weaknesses Introduced During Design...
CVE-2021-37059
There is a Weaknesses Introduced During Design...
CVE-2021-37059
There is a Weaknesses Introduced During Design...