530 matches found
Dawn Component Data Compromise
The vulnerability of the Dawn component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information by loading a specially create...
Server Oracle MySQL DML DoS
The vulnerability of the Oracle MySQL Server component relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...
Oracle GraalVM Enterprise Edition Disclosure Information
The vulnerability of the Compiler component in Oracle GraalVM Enterprise Edition and Oracle GraalVM for JDK relates to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...
CVE-2024-35570
An arbitrary file upload vulnerability in the component \controller\ImageUploadController.class of inxedu v2.0.6 allows attackers to execute arbitrary code via uploading a crafted jsp file...
CVE-2024-35570
The inxedu online education platform, specifically version 2.0.6 , is affected by an arbitrary file upload vulnerability in the \controller\ImageUploadController.class component. An attacker can exploit this flaw by uploading a specially crafted JSP file to achieve arbitrary code execution . To m...
CVE-2024-33222
The ASUSTeK Computer Inc ASUS ATSZIO Driver v0.2.1.7 is vulnerable to a privilege escalation and arbitrary code execution flaw. The root cause is a security flaw in the ATSZIO64.sys component, which allows an attacker to execute these actions by sending crafted IOCTL requests . As a mitigation, i...
CVE-2024-35109
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /homeProdeal.php?mudi=add&nohrefStr=close...
CVE-2024-35108
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/homeProdeal.php?mudi=del&dataType=&dataTypeCN...
Oracle VM VirtualBox Privilege Escalation
The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2024-25355
s3-url-parser 1.0.3 is vulnerable to Denial of service via the regexes component...
CVE-2024-33102
A stored cross-site scripting XSS vulnerability in the component /pubs/counter.php of ThinkSAAS v3.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the code parameter...
Prompts Component Information Disclosure
The vulnerability of the Prompts component in Microsoft Edge and Google Chrome is related to improper security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information remotely...
Oracle VM VirtualBox Code Execution
The vulnerability of the Core component of the Oracle VM VirtualBox software is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2024-32206
A stored cross-site scripting XSS vulnerability in the component \affiche\admin\index.php of WUZHICMS v4.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $formdata parameter...
RackTables Component Sensitive Information Disclosure
The vulnerability of the /index.php?page=search component of the web application used to manage RackTable assets exists due to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to disclose sensitive informatio...
PT-2024-22586 · Mitel · Mitel Inattend +1
Name of the Vulnerable Software and Affected Versions: Mitel InAttend versions 2.6 SP4 through 2.7 Mitel CMG versions 8.5 SP4 through 8.6 Description: A vulnerability in the BluStar component could allow access to sensitive information, changes to the system configuration, or execution of arbitra...
Cross site request forgery (csrf)
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articledescriptionmain.php...
CVE-2024-28432
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articleedit.php...