14712 matches found
IBM Spectrum Protect Plus uploadLdapCertificate Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of IBM Spectrum Protect Plus. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the Administrative...
Unspecified Vulnerability in Apple macOS Catalina Call History Component
Apple macOS Catalina is a specialized operating system developed by Apple for Mac computers.Call History is one of the call history components.... A security vulnerability in the Call History component of Apple macOS Catalina prior to version 10.15.4 can be exploited by malicious applications to...
CVE-2020-10886
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tmpServer service, which listens on TCP port...
CVE-2020-10882
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tdpServer service, which listens on...
Design/Logic Flaw
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tdpServer service, which listens on...
CVE-2020-10886
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tmpServer service, which listens on TCP port...
(Pwn2Own) TP-Link Archer A7 tmpServer Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the tmpServer service, which listens on TCP port 20002. The issue resul...
CVE-2019-20552
An issue was discovered on Samsung mobile devices with P9.0 software. Attackers can bypass Factory Reset Protection FRP via an RCS call. The Samsung ID is SVE-2019-15035 October 2019...
Design/Logic Flaw
An issue was discovered on Samsung mobile devices with P9.0 software. Attackers can bypass Factory Reset Protection FRP via an RCS call. The Samsung ID is SVE-2019-15035 October 2019...
CVE-2019-20552
An issue was discovered on Samsung mobile devices with P9.0 software. Attackers can bypass Factory Reset Protection FRP via an RCS call. The Samsung ID is SVE-2019-15035 October 2019...
CVE-2019-20552
CVE-2019-20552 concerns FRP (Factory Reset Protection) bypass on Samsung mobile devices running Android P (9.0) via an RCS call. Connected sources corroborate a FRP bypass vulnerability affecting Samsung devices; one CNVD entry characterizes the underlying issue as an input validation error, whil...
Facebook Thrift has an unspecified vulnerability
Facebook Thrift is a branch of Apache Thrift from Facebook Inc. is a serialization and RPC framework for service communication. A security vulnerability exists in versions prior to Facebook Thrift v2019.12.09.00 Java, which can be exploited by an attacker to cause a denial of service by sending a...
svglib package for Python code issue vulnerability
svglib package for Python is a Python library for reading and converting SVG files. A code issue vulnerability exists in svglib package 0.9.3 and earlier Python, which can be exploited by an attacker to conduct an XXE attack via a svg2rlg call...
CVE-2013-7487
On Swann DVR04B, DVR08B, DVR-16CIF, and DVR16B devices, raysharpdvr application has a vulnerable call to “system”, which allows remote attackers to execute arbitrary code via TCP port 9000...
Design/Logic Flaw
The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...
CVE-2020-10799
The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call...
The vulnerability of the Advanced Local Procedure Call operating system in Windows, related to insecure management of privileges, allows attackers to escalate their privileges.
The vulnerability of the Advanced Local Procedure Call operating system in Windows allows for the exploitation of insecure privileges management. Exploiting this vulnerability can enable an attacker to enhance their privileges...
CVE-2020-10675
The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service infinite loop via a Delete call...
