NETGEAR Router Synchronization Error

The vulnerability of the embedded software of NETGEAR routers such as NETGEAR GC108P, NETGEAR GC108PP, NETGEAR GS108Tv3, NETGEAR GS110TPP, NETGEAR GS110TPv3, NETGEAR GS110TUP, NETGEAR GS308T, NETGEAR GS310TP, NETGEAR GS710TUP, NETGEAR GS716TP, NETGEAR GS716TPP, NETGEAR GS724TPP, NETGEAR GS724TPv2...

Moodle Code Execution

The vulnerability of the Moodle administration system is related to errors in code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...

Squid Caching Proxy Authentication Error Man-in-the-Middle

The vulnerability of the Squid application is related to authentication errors. Exploiting this vulnerability allows a remote attacker to carry out a “man-in-the-middle” attack...

Microsoft Bing Search for Android Information Representation Error

The vulnerability of Microsoft Bing Search for Android relates to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spearishing attacks...

JavaScript script handlers Microsoft Edge Chrome Code Execution

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers is related to type conversion errors. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

GHSA-7V7W-F7C6-F829 YetiForceCRM is vulnerable to Business Logic Errors because product amount can be a negative number

YetiForceCRM is vulnerable to Business Logic Errors because product amount can be a negative number...

YetiForceCRM is vulnerable to Business Logic Errors in the weight of a product

YetiForceCRM is vulnerable to Business Logic Errors in the Weight of a Product since that value can be a negative number...

GHSA-CXG7-84WP-8PCQ YetiForceCRM is vulnerable to Business Logic Errors in the weight of a product

YetiForceCRM is vulnerable to Business Logic Errors in the Weight of a Product since that value can be a negative number...

gSOAP WS-Security DoS

The vulnerability of the WS-Security plugin in the gSOAP software development environment is related to errors in pointer assignment during SOAP request processing. Exploiting this vulnerability allows an attacker to cause service failures by sending specially crafted HTTP requests...

Microsoft Exchange Server Code Execution

The vulnerability of Microsoft Exchange Server is related to errors in code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

SUSE SLES15 Security Update : kernel (Live Patch 0 for SLE 15 SP3) (SUSE-SU-2021:4099-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:4099-1 advisory. This update for the Linux Kernel 5.3.18-57 fixes several issues. The following security issues were fixed: - CVE-2021-0941: In...

nginx.ingress.kubernetes.io/auth-type Controller File Name Management

The vulnerability of the nginx.ingress.kubernetes.io/auth-type controller in the Kubernetes ingress-nginx cluster is related to errors in processing hypertext links. Exploiting this vulnerability may allow an attacker to gain access to the ability to create, modify, or delete data...

gSOAP WS-Addressing Plugin DoS

The vulnerability of the WS-Addressing plugin in the gSOAP software development environment is related to errors in pointer manipulation during SOAP request processing. Exploiting this vulnerability allows an attacker to cause service failures by sending specially crafted HTTP requests...

Omnibox address bar manipulation

The vulnerability of the Omnibox address bar in Google Chrome is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to manipulate the content of the address bar using a specially created URL...

Remote Desktop Services RCE

The vulnerability of Remote Desktop Services RDS on the Microsoft Windows operating system arises due to errors in checking RDS service requests when connecting via the RDP protocol. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Google Chrome Downloads Code Execution

The vulnerability of the Windows operating system and the Google Chrome browser is related to privilege management errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Google Chrome QR Scanner Bypass

The vulnerability of the Google Chrome browser’s QR scanner is related to authentication errors. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions...

Microsoft Exchange Server Spear Phishing

The vulnerability of Microsoft Exchange Server servers is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

Discourse has an unspecified vulnerability (CNVD-2022-05508)

Discourse is an open source community discussion platform that includes community, email and chat room features. The platform includes community, email and chat room features. discourse-footnote has a security vulnerability that could be exploited to trigger null-reference javascript errors...

OpenSSL: Invalid handling of X509_verify_cert() internal errors (20211214) - Windows

OpenSSL is prone to an invalid handling of X509verifycert internal errors vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later Thi...