63 matches found
TOTOLINK AC1200 安全漏洞
TOTOLINK AC1200 is a dual-band Wi-Fi router from China's Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK AC1200 version V3.0.0-B20230809.1615, which originates from vulnerability to buffer overflow and allows attackers to cause a stack overflow, which could lead to a comman...
CVE-2024-34196
Totolink AC1200 Wireless Dual Band Gigabit Router A3002RU_V3 firmware V3.0.0-B20230809.1615 is affected by a buffer overflow in the boa CGI, allowing an attacker to modify the vwlan_idx field via formMultiAP. By crafting malformed HTTP requests with a WLAN SSID exceeding the expected length, this...
CVE-2024-28623
RiteCMS v3.0.0 was discovered to contain a cross-site scripting XSS vulnerability via the component mainmenu/editsection...
Cross site scripting
RiteCMS v3.0.0 was discovered to contain a cross-site scripting XSS vulnerability via the component mainmenu/editsection...
CVE-2024-28623
RiteCMS v3.0.0 was discovered to contain a cross-site scripting XSS vulnerability via the component mainmenu/editsection...
CVE-2024-28623
RiteCMS v3.0.0 was discovered to contain a cross-site scripting XSS vulnerability via the component mainmenu/editsection...
CVE-2024-28623
RiteCMS 3.0.0 contains a reflected XSS in the main_menu/edit_section component. The vulnerability stems from unsanitized user input, allowing an attacker to inject and execute arbitrary JavaScript in the victim’s browser. Impact includes potential credential/session token theft and browser sessio...
Design/Logic Flaw
AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assignframebufferp in av1/common/av1commonint.h...
CVE-2023-39616
AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assignframebufferp in av1/common/av1commonint.h...
CVE-2023-39616
AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assignframebufferp in av1/common/av1commonint.h...
Security Bulletin: Security Vulnerabilities in GNU glibc affect IBM Cloud Pak for Data - GNU glibc (CVE-2020-1751)
Summary Security Vulnerabilities in GNU glibc affect IBM Cloud Pak for Data - GNU glibc CVE-2020-1751 Vulnerability Details CVEID:CVE-2020-1751 DESCRIPTION: GNU glibc could allow a local attacker to execute arbitrary code on the system, caused by an out-of-bounds write when handling signal...
Security Bulletin: Security Vulnerabilities affect IBM Cloud Pak for Data - Golang (CVE-2020-24553)
Summary Security Vulnerabilities affect IBM Cloud Pak for Data - Golang CVE-2020-24553 Vulnerability Details CVEID:CVE-2020-24553 DESCRIPTION: Golang Go is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the CGI/FCGI handlers. A remote attacker could...
CVE-2023-36201
An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted script to the arrays...
CVE-2023-36201
CVE-2023-36201 affects JerryscriptProject jerryscript v3.0.0. A crafted script targeting arrays can cause leakage of sensitive information. Root cause details are not fully specified in the provided sources, and there is no patch/fix information in the supplied documents. Exploitation status is n...
CVE-2022-4413
Cross-site Scripting XSS - Reflected in GitHub repository nuxt/framework prior to v3.0.0-rc.13...
CVE-2022-4414 Cross-site Scripting (XSS) - DOM in nuxt/framework
Cross-site Scripting XSS - DOM in GitHub repository nuxt/framework prior to v3.0.0-rc.13...
CVE-2022-4414 Cross-site Scripting (XSS) - DOM in nuxt/framework
Cross-site Scripting XSS - DOM in GitHub repository nuxt/framework prior to v3.0.0-rc.13...
CVE-2022-4413 Cross-site Scripting (XSS) - Reflected in nuxt/framework
Cross-site Scripting XSS - Reflected in GitHub repository nuxt/framework prior to v3.0.0-rc.13...
