15817 matches found
CVE-2017-14454
Multiple exploitable buffer overflow vulnerabilities exists in the PubNub message handler for the "control" channel of Insteon Hub running firmware version 1012. Specially crafted replies received from the PubNub service can cause buffer overflows on a global section overwriting arbitrary data. A...
PT-2023-10531 · Unknown +1 · Insteon Hub +1
Name of the Vulnerable Software and Affected Versions: Insteon Hub version 1012 Description: Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "control" channel. Specially crafted replies received from the PubNub service can cause buffer overflows on...
PT-2023-10214 · Unknown · Gperson Angular-Test-Reporter
Name of the Vulnerable Software and Affected Versions: gperson angular-test-reporter affected versions not specified Description: A critical issue was found in gperson angular-test-reporter, affecting the function getProjectTables/addTest of the file rest-server/data-server.js. This issue leads t...
angular-test-reporter SQL注入漏洞
angular-test-reporter is an application for publishing and viewing automated test results by Grant Person Personal Developer. A SQL injection vulnerability exists in angular-test-reporter that originates in the function getProjectTables/addTest in the file rest-server/data-server.js, which operat...
PT-2023-13266 · Unknown · Bluetooth Host
Name of the Vulnerable Software and Affected Versions: Bluetooth HOST affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read in the Bluetooth HOST. This occurs while processing GetFolderItems and GetItemAttribute commands from a peer...
DEBIAN-CVE-2022-47662
GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 has a segment fault /stack overflow due to infinite recursion in MediaGetSample isomedia/media.c:662...
UBUNTU-CVE-2022-47662
GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 has a segment fault /stack overflow due to infinite recursion in MediaGetSample isomedia/media.c:662...
DevNewsAggregator SQL注入漏洞
DevNewsAggregator is a development news aggregator by Steve Jagodzinski Personal Developer. DevNewsAggregator suffers from a SQL injection vulnerability that stems from a problem with the function getByName in the file php/dataaccess/RemoteHtmlContentDataAccess.php, where manipulation of the...
The vulnerability of the software for coordinating the operation of security systems and for managing real-time incident responses in Fortinet FortiSOAR is related to improper access control. This allows attackers to gain access to the API gateway.
The vulnerability of the software for coordinating the operation of security systems and for managing incident responses in real-time with Fortinet FortiSOAR is related to improper access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the...
PT-2023-10189 · Opendns · Opendns Openresolve
Name of the Vulnerable Software and Affected Versions: OpenDNS OpenResolve affected versions not specified Description: A problem was found in OpenDNS OpenResolve, related to the function get of the file resolverapi/endpoints.py of the component API. This issue leads to cross site scripting. The...
PT-2025-54088
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's soundwire bus component related to power management runtime pm runtime handling. Specifically, an unbalanced pm runtime put call can lead to a usage...
PT-2025-38050
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to inter-processor interrupts IPIs. Specifically, a NULL pointer dereference can occur in the irq data get affinity mask function when ipi send...
Get based CSRF on Reset OP Cache functionality
Description The functionality to reset the OPCache is vulnerable to CSRF. In fact, it would be a good practice to implement a CSRF token in URL if the GET functionality is meant to trigger an action, instead of only retrieving data. Alternatively, it can be turned in a POST request, which I can s...
PT-2022-7786 · Unknown · Yuna Scatari Tbdev
Name of the Vulnerable Software and Affected Versions: Yuna Scatari TBDev versions up to 2.1.17 Description: A vulnerability has been found in Yuna Scatari TBDev, classified as problematic. The issue affects the function get user icons of the file usersearch.php. The manipulation of the argument...
CVE-2022-46585
TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the REMOTEUSER parameter in the getaccess sub45AC2C function...
PT-2022-27913 · Trendnet · Trendnet Tew755Ap
Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered via the REMOTE USER parameter in the get access sub 45AC2C function. Recommendations: For TRENDnet TEW755AP version 1.13B01, consider restricting access to t...
TRENDnet TEW-755AP 缓冲区错误漏洞
The TRENDnet TEW-755AP is a router from TRENDnet. The TRENDnet TEW-755AP suffers from a stack overflow vulnerability that stems from a lack of size checking of input data in the REMOTEUSER parameter of the getaccess sub45AC2C function, which can be exploited by an attacker to execute arbitrary co...
OpenMRS 跨站脚本漏洞
OpenMRS is an open source electronic medical record system from OpenMRS, Inc. in the United States. OpenMRS version 1.17.0 before the security vulnerability , the vulnerability stems from the component Notes Handler in the...
