2881 matches found
CVE-2006-5041
Unspecified vulnerability in Hot Properties possibly comhotproperties 0.97 and earlier for Joomla! has unspecified impact and attack vectors...
CVE-2002-1939
FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties...
PT-2025-35952
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The event seq changed handler in the Linux kernel does not validate the payload size against the message length, potentially leading to out-of-bounds memory access if the firmware provid...
Neural-Inspired Advances in Integral Cryptanalysis
The study by Gohr et.al at CRYPTO 2019 and sunsequent related works have shown that neural networks can uncover previously unused features, offering novel insights into cryptanalysis. Motivated by these findings, we employ neural networks to learn features specifically related to integral...
Gosuncn Audio-Visual Integrated Management Platform 访问控制错误漏洞
Gosuncn Audio-Visual Integrated Management Platform is an intelligent audio-video convergence management platform from China's Gosuncn, which supports multi-protocol device access and AI analysis. An access control error vulnerability exists in Gosuncn Audio-Visual Integrated Management Platform...
SUSE CVE-2025-3416
A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string...
CVE-2025-4318 Input validation issue in AWS Amplify Studio UI component properties
The AWS Amplify Studio UI component property expressions in the aws-amplify/amplify-codegen-ui package lack input validation. This could potentially allow an authenticated user who has access to create or modify components to run arbitrary JavaScript code during the component rendering and build...
CVE-2023-53139
In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: add null check of devmkmallocarray in fdpncii2creaddeviceproperties devmkmallocarray may fails, fwvsccfg might be null and cause out-of-bounds write in devicepropertyreadu8array later...
DEBIAN-CVE-2023-53139
In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: add null check of devmkmallocarray in fdpncii2creaddeviceproperties devmkmallocarray may fails, fwvsccfg might be null and cause out-of-bounds write in devicepropertyreadu8array later...
UBUNTU-CVE-2023-53139
In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: add null check of devmkmallocarray in fdpncii2creaddeviceproperties devmkmallocarray may fails, fwvsccfg might be null and cause out-of-bounds write in devicepropertyreadu8array later...
CVE-2024-52888
For an authenticated end-user the portal may run a script while attempting to display a directory or some file's properties...
Code Injection
Overview Affected versions of this package are vulnerable to Code Injection via the saveService function. If dynamic service registration is enabled which it is not by default, a privileged attacker with access to the saveService interface and the ability to modify application.properties can...
CVE-2024-52888
For an authenticated end-user the portal may run a script while attempting to display a directory or some file's properties...
CVE-2024-52888
CVE-2024-52888 affects Check Point Mobile Access (R82 and earlier). An authenticated end-user may trigger a script during the portal’s display of a directory or file properties, consistent with a stored XSS issue in the File Share access path. The observable behavior is a script execution within ...
CVE-2024-52888 Stored-XSS
For an authenticated end-user the portal may run a script while attempting to display a directory or some file's properties...
GHSA-3G36-GF7C-75QW Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type
Mattermost versions 10.4.x = 10.4.2, 10.5.x = 10.5.0, 9.11.x = 9.11.10 fail to properly validate the props used by the RetrospectivePost custom post type in the Playbooks plugin, which allows an attacker to create a specially crafted post with maliciously crafted props and cause a denial of servi...
WordPress Reales WP theme <= 2.1.2 - Missing Authorization to Unauthenticated Attachment Deletion and Favorite Property Updates vulnerability
Missing Authorization to Unauthenticated Attachment Deletion and Favorite Property Updates vulnerability discovered by Lucio Sá in WordPress Theme Reales WP versions = 2.1.2...
[SECURITY] Fedora 41 Update: rust-icu_properties-1.5.1-1.fc41
Definitions for Unicode properties...