5 matches found
CVE-2026-90547
WWBN AVideo (through commit c3edcc274c389816d434acadac07ee78eaf330c1) contains an authorization flaw in the Bookmark plugin 's getBookmarks.json.php endpoint. The endpoint fails to validate user permissions, allowing unauthenticated attackers to query it with a video ID parameter and retrieve cha...
CVE-2021-20043
A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially execute code as the nobody user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances...
CVE-2021-20043: Heap-based Buffer Overflow
A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially execute code as the nobody user in the appliance. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances...
PT-2021-13739
Name of the Vulnerable Software and Affected Versions: SonicWall SMA100 versions affected versions not specified SonicWall SMA200 affected versions not specified SonicWall SMA210 affected versions not specified SonicWall SMA400 affected versions not specified SonicWall SMA410 affected versions no...
Sonicwall SMA100 buffer error vulnerability
The Sonicwall SMA100 is a secure access gateway device from Sonicwall USA. A security vulnerability exists in the SonicWall SMA100 getBookmarks method that allows a remote authenticated attacker to execute code as the nobody user in the device. The vulnerability affects SMA 200, 210, 400, 410, an...