3114 matches found
CVE-2021-45742
TOTOLINK A720R v4.1.5cu.470B20200911 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERYSTRING parameter...
CVE-2021-45742
TOTOLINK A720R v4.1.5cu.470B20200911 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERYSTRING parameter...
Command injection
TOTOLINK A720R v4.1.5cu.470B20200911 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERYSTRING parameter...
CVE-2021-45742: Improper Neutralization of Special Elements used in a Command
TOTOLINK A720R v4.1.5cu.470B20200911 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERYSTRING parameter...
CVE-2021-46328
Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component libcstartmain...
CVE-2021-46328
Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component libcstartmain...
Moddable SDK 缓冲区错误漏洞
Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable, U.S. Moddable SDK in v11.5.0 is vulnerable to a heap buffer overflow vulnerability stemming from a boundary error in component libcstartmain when handling untrusted input. A remote attacker could...
CVE-2022-21251: Undefined Security Weakness
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite component: Instance Main. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base...
main-board.com Cross Site Scripting vulnerability OBB-2333794
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2022-15022 · Unknown · Puddingbot
Name of the Vulnerable Software and Affected Versions: PuddingBot versions 0.0.6-b933652 and prior Description: PuddingBot is a group management bot. In the affected versions, the bot token is publicly exposed in main.py, making it accessible to malicious actors. The bot token has been revoked an...
UBUNTU-CVE-2021-44590
In libming 0.4.8, a memory exhaustion vulnerability exist in the function cws2fws in util/main.c. Remote attackers could launch denial of service attacks by submitting a crafted SWF file that exploits this vulnerability...
CVE-2020-23026
A NULL pointer dereference in the main function dhry1.c of dhrystone 2.1 causes a denial of service DoS...
CVE-2020-23026
A NULL pointer dereference in the main function dhry1.c of dhrystone 2.1 causes a denial of service DoS...
Null pointer dereference
A NULL pointer dereference in the main function dhry1.c of dhrystone 2.1 causes a denial of service DoS...
UBUNTU-CVE-2020-23026
A NULL pointer dereference in the main function dhry1.c of dhrystone 2.1 causes a denial of service DoS...
CVE-2020-23026
CVE-2020-23026 describes a NULL pointer dereference in the main() function (dhry_1.c) of dhrystone 2.1, causing a denial of service (DoS). The issue is reported consistently across multiple sources (NVD, Red Hat, CNVD, OSV, UBuntu, Nessus, etc.). The available documents do not provide a product/v...
CVE-2020-23026: NULL Pointer Dereference
A NULL pointer dereference in the main function dhry1.c of dhrystone 2.1 causes a denial of service DoS...
VulnCheck KEV: CVE-2022-37450
Go Ethereum aka geth through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a manipulation of time-difference values to achieve replacement of main-chain blocks, aka Riskless Uncle Making RUM, as exploited in the wild in 2020 through 2022...
Dhrystone 代码问题漏洞
dhrystone is a comprehensive benchmark program for system integer programming from the personal developer Reinhold P. Weicker. dhrystone suffers from a buffer error vulnerability stemming from a null pointer dereference in the main function dhry1.c of dhrystone 2.1, which could be exploited by an...