301157 matches found
Cisco ASA Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2019-12673)
A vulnerability in the FTP inspection engine of Cisco Adaptive Security ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient validatio...
Cisco ASA Origin Validation Error (CVE-2023-20275)
A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to send packets with another VPN user's source IP address. This vulnerability is due to improper...
Cisco ASA Improper Access Control (CVE-2020-3564)
A vulnerability in the FTP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass FTP inspection. The vulnerability is due to ineffective flow tracking of FTP traffic. An attacke...
Cisco ASA/FTD Cross-site Scripting (CVE-2020-3581)
Multiple vulnerabilities in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the web services interface of an...
Cisco ASA/FTD Observable Discrepancy (CVE-2020-3585)
A vulnerability in the TLS handler of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software for Cisco Firepower 1000 Series firewalls could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to...
PT-2026-106874
Incorrect authorization in Actor in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially bypass site isolation via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106202: Use of Uninitialized Resource
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...
Cisco ASA Cross-site Scripting (CVE-2024-20341)
A vulnerability in the VPN web client services feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a browser that is accessing an affected...
PT-2026-107196
An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by untrusted sources. Successful exploitation could allow an unauthenticated remote attacker, with user interaction, to...
CVE-2026-41091
🛡️ CVE-2026-41091 - RedSun ثغرة رفع امتياز في Microsoft Defender RedSun هي تقنية لرفع الامتيازات المحلية LPE وإثبات المفهوم PoC تستغل ثغرة تتبع الروابط في محرك حماية البرامج الضارة من Microsoft Defender. تسمح لمهاجم مصادق عليه بصلاحيات منخفضة بالحصول على صلاحيات SYSTEM عن طريق خداع آليات المعالجة...
CVE-2026-104712
A flaw was found in Apache Struts. An unauthenticated remote attacker could cause a Denial of Service DoS by sending requests with crafted decimal parameters that are rendered through the Struts tag library. Processing these values can produce disproportionately large server responses, enabling a...
GHSA-2MJX-QC3C-RQVC Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
Rustls accepted TLS 1.3 handshake messages sent at the wrong encryption level when they followed a key-changing message in the same record. The handshake transcript is still authenticated, so a network-position attacker cannot use this to alter or complete a handshake; the practical effect is tha...
GHSA-W3VV-58GJ-GW77 Nx daemon and plugin worker sockets are accessible to other local users
Summary Nx creates the Unix domain sockets for its daemon and its plugin workers in a shared temporary directory with default permissions, so any other user on the same machine can connect to them. The daemon accepts a PROCESSINBACKGROUND request that names a module to load and invokes its defaul...
EUVD-2026-91762
Nx daemon and plugin worker sockets are accessible to other local users...
Nx daemon and plugin worker sockets are accessible to other local users
Summary Nx creates the Unix domain sockets for its daemon and its plugin workers in a shared temporary directory with default permissions, so any other user on the same machine can connect to them. The daemon accepts a PROCESSINBACKGROUND request that names a module to load and invokes its defaul...
CVE-2011-2523
CVE-2011-2523 — Exploit de la porte dérobée de vsftpd 2.3.4 Aperçu vsftpd Very Secure FTP Daemon est un serveur FTP pour les plateformes de type Unix, y compris Linux, distribué sous la licence publique générale GNU. En juillet 2011, il a été découvert que la version 2.3.4 de vsftpd — disponible ...
CVE-2026-105471 girishsaraf Online-Appointment-Booking-System Registration signup.php sql injection
A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Impacted is an unknown function of the file signup.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. The...
CVE-2026-105471 girishsaraf Online-Appointment-Booking-System Registration signup.php sql injection
A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Impacted is an unknown function of the file signup.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. The...
CVE-2026-50751
ماسح CVE-2026-50751 لـ Check Point IKEv1 أداة مسح ثغرات متعددة الخيوط لـ CVE-2026-50751 ، وهي ثغرة خطيرة في تجاوز المصادقة لبروتوكول IKEv1 تؤثر على بوابات الأمان الكمومية من Check Point. نظرة عامة أنظمة VPN للوصول عن بُعد من Check Point مع تمكين IKEv1 عرضة لهجمات تجاوز المصادقة. تكتشف هذه الأداة ...
NetLogic
NetLogic Cloud-Native Attack Surface Mapper & Vulnerability Correlator — v3.0 NetLogic is a network security platform combining active port scanning, CVE correlation live NVD API, SSL/TLS analysis, HTTP security auditing, DNS/email security assessment, subdomain takeover detection, passive OSINT,...