507 matches found
CVE-2019-16312
s-cms V3.0 has XSS in index.php?type=text via the Sid parameter...
EUVD-2019-18924
Malware in sbrugna...
EUVD-2017-12535
Malware in sbrugna...
EUVD-2019-7102
Malware in sbrugna...
EUVD-2020-13481
Malware in sbrugna...
EUVD-2017-12467
Malware in sbrugna...
EUVD-2018-9182
Malware in sbrugna...
EUVD-2022-32597
Malicious code in bioql PyPI...
EUVD-2022-0978
Malicious code in bioql PyPI...
CVE-2024-44871
An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2022-24589
Burden v3.0 was discovered to contain a stored cross-site scripting XSS in the Add Category function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the task parameter...
CVE-2020-21431
HongCMS v3.0 contains an arbitrary file read and write vulnerability in the component /admin/index.php/template/edit...
CVE-2019-9552
Eloan V3.0 through 2018-09-20 allows remote attackers to list files via a direct request to the p2p/api/ or p2p/lib/ or p2p/images/ URI...
The vulnerability of the SafeSetMacFilter function in the Tenda O4 V3.0 wireless Wi-Fi access point software allows a intruder to influence the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the SafeSetMacFilter function in the Tenda O4 V3.0 wireless Wi-Fi access point software relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and...
CVE-2025-25662
Tenda O4 V3.0 V1.0.0.102936 is vulnerable to Buffer Overflow in the function SafeSetMacFilter of the file /goform/setMacFilterList via the argument remark/type/time...
CVE-2025-25662
Tenda O4 V3.0 V1.0.0.102936 is vulnerable to Buffer Overflow in the function SafeSetMacFilter of the file /goform/setMacFilterList via the argument remark/type/time...
CVE-2024-11705
NSCDeriveKey inadvertently assumed that the phKey parameter is always non-NULL. When it was passed as NULL, a segmentation fault SEGV occurred, leading to crashes. This behavior conflicted with the PKCS11 v3.0 specification, which allows phKey to be NULL for certain mechanisms. This vulnerability...
CVE-2024-11705
The CVE-2024-11705 issue is due to NSC_DeriveKey assuming phKey is non-NULL; passing NULL leads to a segmentation fault (crash). Affected products reported across sources include Firefox and Thunderbird prior to version 133. The vulnerability description and linked advisories indicate this NULL d...
CVE-2024-51364
An arbitrary file upload vulnerability in ModbusMechanic v3.0 allows attackers to execute arbitrary code via uploading a crafted .xml file...
CVE-2024-51364
An arbitrary file upload vulnerability in ModbusMechanic v3.0 allows attackers to execute arbitrary code via uploading a crafted .xml file...