66 matches found
HCCTG MPOS M6 PLUS processing logic error vulnerability
The HCCTG MPOS M6 PLUS 1.31-N version contains a processing logic vulnerability. This vulnerability stems from an unknown function of the Display QR Code Rendering component, which leads to improper parameter handling related to alignment operations. As a result, the rendering UI layer is...
Moxa Router Improper Parameter Handling
The vulnerability of Moxa TN-4900, Moxa EDR-8010, Moxa EDR-G9010, Moxa OnCell G4302-LTE4, and Moxa OnCell G4308-LTE4 microprogrammed router software is related to improper handling of parameter length discrepancies. Exploiting this vulnerability can allow an attacker to trigger service failures...
CVE-2026-13752 Snowflake CLI SQL Injection Through Improper Neutralization of Parameters in Secret Creation and SPCS Service Log Commands
Improper neutralization of parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. An attacker could exploit this by supplying crafted values to vulnerable command paths, causing Snowflake CLI to execute unintended SQL in the context of the user’s Snowflake session...
Itsourcecode Online House Rental System SQL Injection Vulnerability
itsourcecode Online House Rental System is an open-source online housing rental system developed by itsourcecode. Version 1.0 of the itsourcecode Online House Rental System has a SQL injection vulnerability. This vulnerability arises from improper handling of parameter IDs in the...
WS-2022-0193
Improper handling of parameter lead to listing any directory in microweber/microweber before 1.2.20...
EcclesiaCRM security vulnerabilities
EcclesiaCRM is a customer relationship management software for church management, developed by the French individual phili67. Versions of EcclesiaCRM 8.0.0 and earlier contained security vulnerabilities. These vulnerabilities were caused by improper handling of the custom parameter in the...
DjangoBlog security vulnerabilities
DjangoBlog is a blog system developed by liangliangyy using Django. Versions of DjangoBlog 2.1.0.0 and earlier had security vulnerabilities. These vulnerabilities were caused by improper handling of parameters in the file servermanager/api/commonapi.py, leading to command injection and potential...
WordPress plugin Riaxe Product Customizer has a security vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...
CVE-2025-50672
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /yyxzdlink.asp endpoint...
CVE-2025-50672: Buffer Copy without Checking Size of Input
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /yyxzdlink.asp endpoint...
ModulithShop SQL Injection Vulnerability
ModulithShop is an online shopping system developed by Shopsuite’s individual developers. ModulithShop has a SQL injection vulnerability. This vulnerability stems from improper handling of parameters sidx/sort in the function listItem in the file...
Smoothwall Express cross-site scripting vulnerability
Smoothwall Express is an open-source firewall operating system based on GNU/Linux, developed by Smoothwall. Versions of Smoothwall Express prior to 3.1 Update 13 had a cross-site scripting vulnerability. This vulnerability stemmed from improper cleaning of URL parameters, which could lead to...
UTT HiPER 810G security vulnerabilities
UTT HiPER 810G is a firewall router produced by UTT Corporation. Versions of UTT HiPER 810G prior to 1.7.7-1711 contained security vulnerabilities. These vulnerabilities were caused by improper handling of parameters in files located at /goform/formTaskEditap, which could lead to buffer overflows...
CVE-2023-20514
Improper handling of parameters in the AMD Secure Processor ASP could allow a privileged attacker to pass an arbitrary memory value to functions in the trusted execution environment resulting in arbitrary code execution...
AMD Secure Processor security vulnerabilities
The AMD Secure Processor is an independent ARM Coretex-A5 chip developed by the American semiconductor company AMD. The AMD Secure Processor has a security vulnerability that stems from improper parameter handling, which may allow for the execution of arbitrary code...
Projectworlds Online Food Ordering System SQL Injection Vulnerability
Projectworlds Online Food Ordering System is an online meal ordering system developed by Projectworlds Company in India. Version 1.0 of the Projectworlds Online Food Ordering System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter ID in the...
COCO Annotator Authorization Issue Vulnerability
COCO Annotator is a web-based image annotation tool developed by Justin Brooks. It aims to provide versatility and efficient image annotation. Versions of COCO Annotator prior to 0.11.1 contained an authorization vulnerability. This vulnerability stemmed from incorrect handling of parameter IDs i...
CVE-2026-22913
Improper handling of a URL parameter may allow attackers to execute code in a user's browser after login. This can lead to the extraction of sensitive data...
SICK TDC-X401GL has security vulnerabilities
The SICK TDC-X401GL is a edge computing gateway developed by the German company SICK. The SICK TDC-X401GL has a security vulnerability, which stems from improper handling of URL parameters. This vulnerability could allow attackers to execute code in the browser after users log in...
