4517 matches found
Microsoft 3D Builder PLY File Parsing Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...
WordPress plugin tagDiv Composer cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...
CVE-2023-20250
A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper validation of requests that are sent to the...
CVE-2023-30712
Improper input validation in Settings Suggestions prior to SMR Sep-2023 Release 1 allows attackers to launch arbitrary activity...
CVE-2020-10128 SearchBlox product before V-9.2.1 is vulnerable to Stored-Cross Site Scripting
SearchBlox product with version before 9.2.1 is vulnerable to stored cross-site scripting at multiple user input parameters. In SearchBlox products multiple parameters are not sanitized/validate properly which allows an attacker to inject malicious JavaScript...
CVE-2022-40534
Memory corruption due to improper validation of array index in Audio...
CVE-2022-33275
Memory corruption due to improper validation of array index in WLAN HAL when received lmitemNum is out of range...
Memory corruption
Memory Corruption due to improper validation of array index in Linux while updating adn record...
Memory corruption
Memory corruption due to improper validation of array index in WLAN HAL when received lmitemNum is out of range...
CVE-2023-28573 Improper Validation of Array Index in WLAN HAL
Memory corruption in WLAN HAL while parsing WMI command parameters...
CVE-2023-28565 Improper Validation of Array Index in WLAN HAL
Memory corruption in WLAN HAL while handling command streams through WMI interfaces...
CVE-2022-40534 Improper Validation of Array Index in Audio
Memory corruption due to improper validation of array index in Audio...
CVE-2023-28548: Improper Validation of Array Index
Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART...
CVE-2022-40534: Improper Validation of Array Index
Memory corruption due to improper validation of array index in Audio...
CVE-2023-28567: Improper Validation of Array Index
Memory corruption in WLAN HAL while handling command through WMI interfaces...
CVE-2023-28557: Improper Validation of Array Index
Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload...
CVE-2023-21636: Improper Validation of Array Index
Memory Corruption due to improper validation of array index in Linux while updating adn record...
CVE-2022-22305: Improper Validation of Certificate with Host Mismatch
An improper certificate validation vulnerability CWE-295 in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x; FortiSandbox 4.0.x, 3.2.x and 3.1.x may allow a network adjacent and unauthenticated attacker to man-in-the-middle th...
CVE-2023-2173
The BadgeOS plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.7.1.6. This is due to improper validation and authorization checks within the badgeosdeletestepajaxhandler, badgeosdeleteawardstepajaxhandler, badgeosdeletedeductstepajaxhandler,...
Acronis Agent authorization issue vulnerability
Acronis Agent is an agent software from Acronis Singapore. A security vulnerability exists in Acronis Agent that stems from improper token expiration validation leading to the disclosure of sensitive information...