9 matches found
CVE-2026-68907
libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, checkDataSetAccess reverses the source and destination arguments to StringUtilscopyStringToBuffer while constructing an MMSASSOCIATIONSPECIFIC...
EUVD-2026-102911
libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, checkDataSetAccess reverses the source and destination arguments to StringUtilscopyStringToBuffer while constructing an MMSASSOCIATIONSPECIFIC...
CVE-2026-85580: Improper Limitation of a Pathname to a Restricted Directory
SiYuan versions before v3.8.2 contain a path guard bypass vulnerability in the MCP file-access handler that uses case-sensitive matching on Linux filesystems. Attackers can read the protected publishAccess.json file by requesting case-variant paths like PublishAccess.json to disclose sensitive...
EUVD-2026-52017
A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function ReportingRCBWriteAccessHandler of the file src/iec61850/server/mmsmapping/reporting.c of the component Report Sending Path Handler. The manipulation results in free of memory not ...
Drupal Administration Views Module Information Disclosure Vulnerability
Drupal is a free, open source content management system developed in PHP.Administration Views module for Drupal is a module for Drupal that replaces the administration overview or listings pages. A security vulnerability in versions 7.x-1.x prior to 7.x-1.x of the Drupal Administration Views modu...
CVE-2015-7226
The Administration Views module 7.x-1.x before 7.x-1.5 for Drupal checks access permissions based on the router path from the view instead of the display property, which allows remote attackers to obtain sensitive information via vectors related to the access handler...
PT-2015-7476
Name of the Vulnerable Software and Affected Versions Administration Views module versions 7.x-1.x through 7.x-1.4 Description The issue allows remote attackers to obtain sensitive information via vectors related to the access handler, due to the module checking access permissions based on the...
CVE-2015-7226: Exposure of Sensitive Information to an Unauthorized Actor
The Administration Views module 7.x-1.x before 7.x-1.5 for Drupal checks access permissions based on the router path from the view instead of the display property, which allows remote attackers to obtain sensitive information via vectors related to the access handler...
PT-2012-5997
Name of the Vulnerable Software and Affected Versions Xen version 4.1 Description The issue is related to an array index error in the HVMOP set mem access handler, which can be exploited by local HVM guest OS administrators. This can lead to a denial of service crash or the disclosure of sensitiv...