5384 matches found
Google Android elevation of privilege vulnerability (CNVD-2022-43233)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that stems from a lack of privilege checking in TBD's TBD, which can be exploited to bypass PIN validation to access PIN-protected settings. An attacker...
Nutanix Data Collection
Collects Nutanix data using REST APIs. TRUSTED...
Google Android Elevation of Privilege Vulnerability (CNVD-2022-43856)
Google Android is a Linux-based open source operating system from Google, Inc. An elevation-of-privilege vulnerability exists in Google Android, which originates in several functions in LauncherApps.java and could result in an elevation-of-privilege situation due to a logic error in the code. An...
Google Android Elevation of Privilege Vulnerability (CNVD-2022-44605)
Google Android is a Linux-based open source operating system from Google, Inc. Google Android has an elevation of privilege vulnerability that can be exploited by local attackers to cause local privilege escalation...
Google Android Information Disclosure Vulnerability (CNVD-2022-32846)
Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to obtain some VoLTE sensitive information and manage VoLTE calls...
Input validation
An authenticated user may trigger an invariant assertion during command dispatch due to incorrect validation on the $external database. This may result in mongod denial of service or server crash. This issue affects: MongoDB Inc. MongoDB Server v5.0 versions, prior to and including v5.0.6...
ThoughtWorks GoCD Information Disclosure Vulnerability
ThoughtWorks GoCD is a free and open source CI/CD server from ThoughtWorks, Inc. An information disclosure vulnerability exists in versions of ThoughtWorks GoCD prior to 21.3.0, which could be exploited by an attacker with the right to create a new pipeline on the GoCD server by abusing the Git U...
Google Android Elevation of Privilege Vulnerability (CNVD-2022-44610)
Google Android is a Linux-based open source operating system from Google, Inc. An attacker could exploit this vulnerability to cause a local privilege escalation...
Google Android Input Validation Error Vulnerability (CNVD-2022-31845)
Google Android is a Linux-based open source operating system from Google. An input validation error vulnerability exists in Google Android, which can be exploited by an attacker to compromise a vulnerable system...
Google Android Buffer Overflow Vulnerability (CNVD-2022-44583)
Google Android is a Linux-based open source operating system from Google, Inc. Google Android has a buffer overflow vulnerability that can be exploited by attackers to cause remote information disclosure...
Delta Controls enteliTOUCH 3.40.3935 - Cross-Site Request Forgery (CSRF)
Exploit Tile: Delta Controls enteliTOUCH 3.40.3935 - Cross-Site Request Forgery CSRF Exploit Author: LiquidWorm enteliTouch CSRF CSRF Add User:...
Delta Controls enteliTOUCH 3.40.3935 - Cookie User Password Disclosure
Exploit Title: Delta Controls enteliTOUCH 3.40.3935 - Cookie User Password Disclosure Exploit Author: LiquidWorm Vendor: Delta Controls Inc. Product web page: https://www.deltacontrols.com Affected version: 3.40.3935 3.40.3706 3.33.4005 Summary: enteliTOUCH - Touchscreen Building Controller. Get...
ThoughtWorks GoCD Cross-Site Scripting Vulnerability
ThoughtWorks GoCD is a free and open source CI/CD server from ThoughtWorks, Inc. A cross-site scripting vulnerability exists in versions of ThoughtWorks GoCD prior to 21.3.0, which can be exploited by an attacker controlling a GoCD agent to plant malicious JavaScript into a failed job report...
Unspecified vulnerability in YottaDB (CNVD-2022-31927)
YottaDB is a real-time database from YottaDB, Inc. A security vulnerability exists in YottaDB, which stems from a missing parameter validation in the call to memcpy in checkandsettimeout in srunix/ztimeoutroutines.c allowing an attacker to attempt to read from a NULL pointer. No detailed...
YottaDB has an unspecified vulnerability (CNVD-2022-31930)
YottaDB is a real-time database from YottaDB, Inc. A security vulnerability exists in YottaDB r1.32 and earlier, which stems from a missing NULL check in the call to emittrip in srport/emitcode.c. An attacker could crash the application by dereferencing the NULL pointer. An attacker could crash t...
CVE-2021-21956
A php unserialize vulnerability exists in the Ai-Bolit functionality of CloudLinux Inc Imunify360 5.10.2. A specially-crafted malformed file can lead to potential arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability...
Design/Logic Flaw
A php unserialize vulnerability exists in the Ai-Bolit functionality of CloudLinux Inc Imunify360 5.10.2. A specially-crafted malformed file can lead to potential arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2021-21956
A php unserialize vulnerability exists in the Ai-Bolit functionality of CloudLinux Inc Imunify360 5.10.2. A specially-crafted malformed file can lead to potential arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability...
AeroCMS Cross-Site Scripting Vulnerability
AeroCMS is a content management system from AeroCMS, Inc. A cross-site scripting vulnerability exists in AeroCMS v0.0.1, which can be exploited by attackers to execute arbitrary Web script or HTML by injecting a specially crafted payload into the post title text field...
