3369 matches found
CVE-2025-21171
.NET Remote Code Execution Vulnerability...
CVE-2025-21172
.NET and Visual Studio Remote Code Execution Vulnerability...
Huawei EulerOS: Security Advisory for python-urllib3 (EulerOS-SA-2025-1030)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-9188
Specially constructed queries cause cross platform scripting leaking administrator tokens...
CVE-2024-47520
A user with advanced report application access rights can perform actions for which they are not authorized...
CVE-2024-47518
Specially constructed queries targeting ETM could discover active remote access sessions...
Security Bulletin: Vulnerability in XStream library affects App Connect Professional
Summary There is vulnerability in the XStream library used by App Connect Professional. App Connect Professional has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2024-47072 DESCRIPTION: XStream is vulnerable to a denial of service, caused by a stack-based buffer overflow in...
ROS-20250110-08
A vulnerability in the qrreadermatchcenters function of the ZBar barcode reading library is related to writing outside the buffer boundaries. Exploitation of the vulnerability could allow a remote attacker to gain access to confidential data, compromise its integrity, and compromise its integrity...
CVE-2024-10106
A buffer overflow vulnerability in the packet handoff plugin allows an attacker to overwrite memory outside the plugin's buffer...
CVE-2024-56137
CVE-2024-56137 affects MaxKB (open source knowledge-base Q&A with LLM and RAG). Prior to version 1.9.0, a remote command execution vulnerability exists in the function library module, allowing privileged users to execute OS commands within custom scripts. The issue has been fixed in v1.9.0. Curre...
The vulnerability of the installer of the GFI Archiver software for corporate email and document archiving allows a hacker to execute arbitrary code and gain unauthorized access to protected information.
The vulnerability of the installer of the GFI Archiver software for corporate email and documents is related to the use of an outdated library, Telerik.Web.UI.DLL. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and gain unauthorized access to protected...
CVE-2021-37000
Some Huawei wearables have a permission management vulnerability...
Arbitrary Code Injection
Overview Affected versions of this package are vulnerable to Arbitrary Code Injection due to an improper parsing of the TypeOne FontBBox. This is due to improper sanitization of the bbox values, which could lead to inconsistencies in font metrics or unexpected behavior. Remediation Upgrade...
TCPDF 安全漏洞
TCPDF is an open source library from Tecnick. It is used to generate PDF documents and barcodes. TCPDF version before 6.8.0 has a security vulnerability , the vulnerability stems from the Error function lacks htmlspecialchars call for error messages...
CVE-2024-47157
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions...
Amazon Linux 2 : python38-pip (ALASPYTHON3.8-2024-017)
The version of python38-pip installed on the remote host is prior to 21.0.1-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2PYTHON3.8-2024-017 advisory. Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is...
CVE-2024-11614
An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. This issue enables an untrusted or compromised guest to crash the hypervisor's vSwitch by forging Virtio descriptors to cause out-of-bounds reads. This flaw allows an attacker with a malicious VM using...
CVE-2024-49122
Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...