11314 matches found
BOINC Server 安全漏洞
BOINC Server is an open source distributed computing platform server from the US-based BOINC organization for creating and managing volunteer computing projects. A security vulnerability exists in BOINC Server versions prior to 1.4.5, which stems from improper input neutralization during web page...
PT-2025-20144 · Unknown · Aweos Wp Lock
Name of the Vulnerable Software and Affected Versions: AWEOS WP Lock versions 1.4.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables attackers to inject malicious...
WordPress plugin Submission DOM tracking for Contact Form 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...
SAMSUNG Gallery 安全漏洞
SAMSUNG Gallery is an application from the South Korean company Samsung SAMSUNG. The best image and video viewing application for Galaxy users. SAMSUNG Gallery suffers from a security vulnerability that stems from improper input validation and could lead to a local attacker accessing internal dat...
CVE-2025-23379
Dell Storage Center - Dell Storage Manager, versions 21.0.20, contains an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Script...
CVE-2025-0984
Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Netoloji Software E-Flow allows Accessing Functionality Not Properly Constrained by ACLs, Stored XSS, File Content Injection. This issue...
CVE-2025-0984 Arbitrary File Upload in Netoloji Software's E-Flow
Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Netoloji Software E-Flow allows Accessing Functionality Not Properly Constrained by ACLs, Stored XSS, File Content Injection. This issue...
CVE-2025-21460 Improper Input Validation in Automotive Software platform based on QNX
Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed continuously...
CVE-2024-49845 Improper Input Validation in HLOS
Memory corruption during the FRS UDS generation process...
CVE-2024-49845 Improper Input Validation in HLOS
Memory corruption during the FRS UDS generation process...
CVE-2024-45579 Improper Input Validation in Camera Driver
Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check...
CVE-2024-45579 Improper Input Validation in Camera Driver
Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check...
CVE-2024-45577 Improper Input Validation in Camera Driver
Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information...
Regular Expression Denial Of Service (ReDoS)
org.apereo.cas, cas-server-core-configuration-metadata-repository is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to improper processing of the "Name" argument without input validation, which allows remote attackers to trigger excessive backtracking and degra...
CVE-2024-13943
Tesla Model S Iris Modem QCMAPConnectionManager Improper Input Validation Sandbox Escape Vulnerability. This vulnerability allows local attackers to escape the sandbox on affected affected Tesla Model S vehicles. An attacker must first obtain the ability to execute low-privileged code on the targ...
CVE-2025-2488
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Profelis Informatics SambaBox allows Cross-Site Scripting XSS. This issue affects SambaBox: before 5.1...
The vulnerability in macOS operating systems, related to improper validation of input data, allows attackers to trigger a service failure.
The vulnerability of macOS operating systems is related to improper validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
CVE-2025-46338
Audiobookshelf is a self-hosted audiobook and podcast server. Prior to version 2.21.0, an improper input handling vulnerability in the /api/upload endpoint allows an attacker to perform a reflected cross-site scripting XSS attack by submitting malicious payloads in the libraryId field. The...
ASB-A-369911749
In MMapVAccess of pmros.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
