EUVD-2022-34349

Malicious code in bioql PyPI...

CVE-2024-56897

Improper access control in the HTTP server in YI Car Dashcam v3.88 allows unrestricted file downloads, uploads, and API commands. API commands can also be made to make unauthorized modifications to the device settings, such as disabling recording, disabling sounds, factory reset...

CVE-2024-56897

Improper access control in the HTTP server in YI Car Dashcam v3.88 allows unrestricted file downloads, uploads, and API commands. API commands can also be made to make unauthorized modifications to the device settings, such as disabling recording, disabling sounds, factory reset...

The vulnerability of the desktop publishing system Adobe Framemaker lies in the lack of restrictions on file downloads, which allows a hacker to execute arbitrary code.

The vulnerability of the desktop publishing system Adobe Framemaker lies in the lack of restrictions on file uploads. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability in the Firefox web browser, related to the lack of restrictions on file downloads, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in the Firefox web browser relates to the lack of restrictions on file downloads. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the sysmanage/licence.php component in D-Link’s DAR-7000 and DAR-8000 router microprogramming systems lies in the lack of restrictions on file downloads. This allows a malicious individual to download arbitrary files.

The vulnerability of the sysmanage/licence.php component in D-Link DAR-7000 and DAR-8000 router microprogramming systems lies in the lack of restrictions on file downloads. Exploiting this vulnerability allows a malicious actor to download any files at will...

The vulnerability of the /ossn/administrator/com_installer component of open-source social network software allows a hacker to execute arbitrary code.

The vulnerability of the Open Source Social Network software component /ossn/administrator/cominstaller lies in the lack of restrictions on file downloads. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using a specially created PHP file...

CVE-2016-0796

WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files is prone to multiple vulnerabilities, including open proxy and security bypass vulnerabilities because it fails to properly verify user-supplied input. An attacker may leverage these issues to hide attacks directed at a...

The vulnerability of the DownloadCenterUploadHandler class in the CommCell storage management software allows a attacker to execute arbitrary code in the context of NETWORK SERVICE.

The vulnerability of the DownloadCenterUploadHandler class in the CommCell storage management software is related to the lack of restrictions on file downloads. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of NETWORK SERVICE remotely...

The vulnerability in the web application for managing email distributions, phplist, arises from the lack of restrictions on file downloads, allowing a perpetrator to execute arbitrary code.

The vulnerability of the phplist web application for managing email distributions is related to the lack of restrictions on file downloads. Exploiting this vulnerability allows a malicious actor to execute arbitrary code upon downloading the malicious plugin remotely...

The vulnerability of Trend Micro Worry-Free Business Security and Apex One anti-virus software lies in the lack of restrictions on file downloads, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Trend Micro Worry-Free Business Security and Apex One anti-virus software lies in the lack of restrictions on file downloads. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information throug...

The vulnerability of Firefox ESR browser for Android operating systems, related to the lack of restrictions on file downloads, allows attackers to compromise the confidentiality of protected information.

The vulnerability of Firefox ESR browser for Android operating systems is related to the lack of restrictions on file downloads. Exploiting this vulnerability can allow attackers to compromise the confidentiality of protected information...

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of restrictions on file downloads, which allows attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of restrictions on file downloads. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Php Inventory & Invoice Management System web application lies in the lack of restrictions on file downloads, allowing a malicious user to upload a malicious file.

The vulnerability of the Php Inventory & Invoice Management System web application is related to the lack of restrictions on file uploads. Exploiting this vulnerability allows a malicious actor to upload a malicious file to the file system, where it can be executed “/dashboard/editmyaccountdetail...

The software of the Advantech WebAccess remote monitoring system is vulnerable, allowing a intruder to modify files of any type.

The vulnerability of Advantech WebAccess remote monitoring software lies in the lack of restrictions on file downloads. Exploiting this vulnerability allows a malicious actor to modify files of any type remotely...

Vulnerability of the EMC Documentum Administrator, a tool for managing electronic document systems; the EMC Documentum Digital Asset Management, a tool for managing multimedia materials within electronic document systems; the EMC Documentum TaskSpace, a tool for accessing the repository of electronic document systems; the EMC Documentum Web Publisher, a system for managing web projects. The web interface provides access to the EMC Documentum Webtop repository, allowing an attacker to execute arbitrary code.

The vulnerability of the EMC Documentum Administrator, a tool for managing electronic document systems, and the EMC Documentum Digital Asset Management tool for managing multimedia materials within electronic document systems, as well as the tools for accessing the repository of EMC Documentum...

The vulnerability of the microprogramming software for Micrologix 1100 and 1400 allows a intruder to inject content from an arbitrary file into the FRAME element.

The vulnerability of the microprogrammed logic controllers Micrologix 1100 and 1400 lies in the lack of restrictions on the download of files. Exploiting this vulnerability allows a malicious actor to inject any file content into the FRAME element remotely...