2989 matches found
Microsoft 3D Builder PLY File Parsing Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...
WordPress plugin tagDiv Composer cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
CVE-2023-20250
A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper validation of requests that are sent to the...
CVE-2023-30712
Improper input validation in Settings Suggestions prior to SMR Sep-2023 Release 1 allows attackers to launch arbitrary activity...
CVE-2020-10128 SearchBlox product before V-9.2.1 is vulnerable to Stored-Cross Site Scripting
SearchBlox product with version before 9.2.1 is vulnerable to stored cross-site scripting at multiple user input parameters. In SearchBlox products multiple parameters are not sanitized/validate properly which allows an attacker to inject malicious JavaScript...
CVE-2022-40534
Memory corruption due to improper validation of array index in Audio...
CVE-2022-33275
Memory corruption due to improper validation of array index in WLAN HAL when received lmitemNum is out of range...
Memory corruption
Memory Corruption due to improper validation of array index in Linux while updating adn record...
Memory corruption
Memory corruption due to improper validation of array index in WLAN HAL when received lmitemNum is out of range...
CVE-2023-28573 Improper Validation of Array Index in WLAN HAL
Memory corruption in WLAN HAL while parsing WMI command parameters...
CVE-2023-28565 Improper Validation of Array Index in WLAN HAL
Memory corruption in WLAN HAL while handling command streams through WMI interfaces...
CVE-2022-40534 Improper Validation of Array Index in Audio
Memory corruption due to improper validation of array index in Audio...
CVE-2023-2173
The BadgeOS plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.7.1.6. This is due to improper validation and authorization checks within the badgeosdeletestepajaxhandler, badgeosdeleteawardstepajaxhandler, badgeosdeletedeductstepajaxhandler,...
Acronis Agent 授权问题漏洞
Acronis Agent is an agent software from Acronis Singapore. A security vulnerability exists in Acronis Agent that stems from improper token expiration validation leading to the disclosure of sensitive information...
MyBB < 1.8.36 RCE Vulnerability
MyBB is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb";...
Tenda AC23 sub_451784 function stack overflow vulnerability
Tenda AC23 is a dual-band Gigabit wireless router from Tenda China. A stack overflow vulnerability exists in the Tenda AC23 sub451784 function. The vulnerability stems from the sub451784 function failing to properly validate the length of the input data, which can be exploited by an attacker to...
Input validation
IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 244368...
CVE-2023-22877 IBM InfoSphere Information Server CSV injection
IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 244368...
CVE-2023-22877
CVE-2023-22877 affects IBM InfoSphere Information Server 11.7. The root cause is CSV injection arising from improper validation of CSV contents during processing, enabling a remote attacker to execute arbitrary commands on the system. Documentation cites CVSS metrics with high impact (C/H, I/H, A...
