6 matches found
CVE-2026-92834
A flaw was found in Apache Thrift. The C++ WebSocket server mishandles uninitialized resources and returns an incorrect status code when processing requests. Under specific conditions, a remote attacker could exploit this vulnerability to trigger improper application states and compromise system...
CVE-2025-63219: Improper Access Control
The ITEL ISO FM SFN Adapter firmware ISO2 2.0.0.0, WebServer 2.0 is vulnerable to session hijacking due to improper session management on the /home.html endpoint. An attacker can access an active session without authentication, allowing them to control the device, modify configurations, and...
CVE-2024-50560
A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V8.2, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V8.2, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V8.2, SCALANCE M812-1 ADSL-Router 6GK5812-1AA00-2AA2 All versions V8.2, SCALANCE...
Huawei HarmonyOS security bypass vulnerability (CNVD-2022-57613)
Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based, fully distributed operating system. Huawei HarmonyOS contains a security vulnerability that could be exploited by attackers to compromise system integrity...
PT-2021-18132
Name of the Vulnerable Software and Affected Versions: HPE ProLiant DL20 Gen10 versions prior to 2.52 HPE ProLiant ML30 Gen10 versions prior to 2.52 HPE ProLiant MicroServer Gen10 Plus versions prior to 2.52 Description: A potential local bypass of security restrictions has been identified in the...
PT-2016-6923
Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software versions 3.70 through 16.4.1 Cisco IOS XE Software versions Denali-16.1.3 through Denali-16.3.1 Description A vulnerability in the package unbundle utility of Cisco IOS XE Software could allow an authenticated, local...