1808 matches found
Linux kernel x86/mtrr DoS
The vulnerability of the x86/mtrr components in the Linux operating system’s kernel is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
XML External Entity (XXE) Injection
Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection via the deserialize method, when handling untrusted XML data, which may contain external entity references. Details XXE Injection is a type of attack against an application that parses XML input. XML is...
Linux kernel DoS
The vulnerability of the Linux operating system’s kernel components is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
Linux kernel Wi-Fi DoS
The vulnerability of the Linux operating system’s kernel Wi-Fi component is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
Adobe Illustrators stack buffer overflow vulnerability (CNVD-2025-06309)
Adobe Illustrator is a professional vector graphic design software developed by Adobe, widely used in graphic design, illustration creation, web design and other fields. A stack buffer overflow vulnerability exists in Adobe Illustrators in versions 29.1, 28.7.3 and earlier. The vulnerability is...
Kerberos Protocol DoS
The vulnerability of the Kerberos protocol for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Linux fs/ntfs3 DoS
The vulnerability of the bpf component in the Linux operating system’s kernel is related to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel GTP Newlink Buffer Overflow DoS
The vulnerability of the gtpnewlink function in the drivers/net/gtp.c file of the Linux kernel is related to an improper representation of the list of network devices, resulting from insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failur...
CVE-2024-7419
The WP ALL Export Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.9.1 via the custom export fields. This is due to the missing input validation and sanitization of user-supplied data. This makes it possible for unauthenticated attackers to...
CVE-2022-2502
A vulnerability exists in the HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 62351-5 and the CMU contains the license feature ‘Advanced security’ which must ...
Android Insufficient Validation Privilege Escalation
The vulnerability of Android operating systems is related to insufficient checking of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
Android Insufficient Validation Privilege Escalation
The vulnerability of Android operating systems is related to insufficient checking of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
Android Insufficient Validation Privilege Escalation
The vulnerability of Android operating systems is related to insufficient checking of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
Framework Component Privilege Escalation
The vulnerability of the Framework component in Android operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
PT-2025-3400 · Classcms · Classcms
Name of the Vulnerable Software and Affected Versions: ClassCMS version 4.8 Description: The issue is related to Cross Site Scripting XSS in the class/admin/channel.php file. This allows for potential malicious script injection. Recommendations: For ClassCMS version 4.8, consider restricting acce...
PowerDNS Recursor DoS
The vulnerability of the PowerDNS Recursor DNS server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
RPM build system XSS
The vulnerability of the RPM-based build system is related to the improper elimination of input data during the generation of web pages. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks XSS...
GSL mathematical library Heap Buffer Overflow DoS
The vulnerability of the GSL mathematical library relates to the copying of buffers without checking the input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
