Out-Of-Bounds

arm-trusted-firmware is vulnerable to a potential out-of-bounds. The vulnerability is due to insufficient validation of the input parameter in register x1 within the sdeiinterruptbind function and this parameter is subsequently used in the platicgetinterrupttype call, allowing an arbitrary value...

Huawei HarmonyOS and EMUI Denial of Service Vulnerability (CNVD-2024-31073)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A denial of service vulnerability exists in Huawei...

CVE-2023-52372

Vulnerability of input parameter verification in the motor module.Successful exploitation of this vulnerability may affect availability...

CVE-2023-52372

Vulnerability of input parameter verification in the motor module.Successful exploitation of this vulnerability may affect availability...

Privilege escalation

Vulnerability of input parameter verification in the motor module.Successful exploitation of this vulnerability may affect availability...

CVE-2023-52372

A denial of service vulnerability exists in Huawei HarmonyOS and EMUI due to improper input parameter validation within the motor module . An attacker could exploit this flaw to negatively affect the availability of the affected systems. Exploitation details or specific patch versions are not pro...

CVE-2023-52372

Vulnerability of input parameter verification in the motor module.Successful exploitation of this vulnerability may affect availability...

CVE-2023-52372

Vulnerability of input parameter verification in the motor module.Successful exploitation of this vulnerability may affect availability...

Easy email Cross-Site Scripting Vulnerability

Easy email is a Zalify open source email system. A cross-site scripting vulnerability exists in Easy email v.4.12.2 and earlier versions that could allow a local attacker to execute arbitrary code via the user input parameter...

CVE-2024-23034

Cross Site Scripting vulnerability in the input parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL...

Cross site scripting

Cross Site Scripting vulnerability in the input parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL...

PT-2024-19642 · Eyoucms · Eyoucms

Name of the Vulnerable Software and Affected Versions: eyoucms version 1.6.5 Description: The issue allows a remote attacker to run arbitrary code via a crafted URL, exploiting a Cross Site Scripting vulnerability in the input parameter. Recommendations: For eyoucms version 1.6.5, consider...

CVE-2024-23034: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in the input parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL...

CVE-2023-5609

The Seraphinite Accelerator WordPress plugin before 2.2.29 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2023-46755

Vulnerability of input parameters being not strictly verified in the input. Successful exploitation of this vulnerability may cause the launcher to restart...

PT-2023-30185 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns the vulnerability of input parameters not being strictly verified. Successful exploitation of this vulnerability may cause the launch...

CVE-2023-27149

A stored cross-site scripting XSS vulnerability in Enhancesoft osTicket v1.17.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Label input parameter when updating a custom list...

CVE-2023-27149: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in Enhancesoft osTicket v1.17.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Label input parameter when updating a custom list...

CVE-2023-3155

The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to Arbitrary File Read and Delete due to a lack of input parameter validation in the galleryedit function, allowing an attacker to access arbitrary resources on the server...

CVE-2023-3155

The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to Arbitrary File Read and Delete due to a lack of input parameter validation in the galleryedit function, allowing an attacker to access arbitrary resources on the server...