90 matches found
VulnCheck KEV: CVE-2026-3965
A security vulnerability has been detected in whyour qinglong up to 2.20.1. Affected is an unknown function of the file back/loaders/express.ts of the component API Interface. The manipulation of the argument command leads to protection mechanism failure. The attack may be initiated remotely. The...
CVE-2026-3965
A security vulnerability has been detected in whyour qinglong up to 2.20.1. Affected is an unknown function of the file back/loaders/express.ts of the component API Interface. The manipulation of the argument command leads to protection mechanism failure. The attack may be initiated remotely. The...
PT-2026-24896
Name of the Vulnerable Software and Affected Versions whyour qinglong versions through 2.20.1 Description A security issue has been identified in whyour qinglong. The problem resides in an unknown function within the back/loaders/express.ts file of the API Interface component. Manipulation of the...
CVE-2026-0785
CVE-2026-0785 covers an issue in the ALGO 8180 IP Audio Alerter where the API interface fails to properly validate a user-supplied string before it is used in a system call. This leads to a remote command injection and remote code execution on affected devices. Authentication is required to explo...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003215)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003215 advisory. The InfiniBand aka IB stack in the Linux kernel before 4.5.3 incorrectly relies on the write system call, which allows local users to cause a denial of service kerne...
(0Day) ALGO 8180 IP Audio Alerter API Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific flaw exists within the API interface. The issue results from the lack of proper validation o...
CVE-2025-20349
A vulnerability in the REST API of Cisco Catalyst Center could allow an authenticated, remote attacker to execute arbitrary commands in a restricted container as the root user. This vulnerability is due to insufficient validation of user-supplied input in REST API request parameters. An attacker...
Fortinet FortiOS 安全漏洞
FortiOS is Fortinet's network operating system that provides firewall, VPN and network security features. A security vulnerability exists in Fortinet FortiOS that stems from an API interface that does not validate return values. An attacker could use this vulnerability to trigger a null pointer...
EUVD-2024-46527
Malicious code in bioql PyPI...
EUVD-2023-38363
Malicious code in bioql PyPI...
EUVD-2025-9639
Malicious code in bioql PyPI...
EUVD-2025-31574
Malicious code in bioql PyPI...
EUVD-2023-38355
Malicious code in bioql PyPI...
EUVD-2023-40607
Malicious code in bioql PyPI...
EUVD-2022-48774
Malicious code in bioql PyPI...
EUVD-2022-48776
Malicious code in bioql PyPI...
CVE-2025-36351 IBM License Metric Tool bypass security
IBM License Metric Tool 9.2.0 through 9.2.40 could allow an authenticated user to bypass access controls in the REST API interface and perform unauthorized actions...
CVE-2024-11239
A vulnerability has been found in Landray EKP up to 16.0 and classified as critical. This vulnerability affects the function deleteFile of the file /sys/common/import.do?method=deleteFile of the component API Interface. The manipulation of the argument folder leads to path traversal. The attack c...
CVE-2023-32310
DataEase is an open source data visualization and analysis tool. The API interface for DataEase delete dashboard and delete system messages is vulnerable to insecure direct object references IDOR. This could result in a user deleting another user's dashboard or messages or interfering with the...
Cisco Catalyst SD-WAN Manager Elevation of Privilege Vulnerability
Cisco Catalyst SD-WAN Manager is an API interface from Cisco for managing and configuring SD-WAN software-defined WAN devices. An elevation of privilege vulnerability exists in Cisco Catalyst SD-WAN Manager, which can be exploited by an attacker to cause an elevation of privilege...