96 matches found
The vulnerability of the formexeCommand function (/goform/execCommand) in the Tenda AC10U router’s microprogramming system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the formexeCommand function /goform/execCommand in the Tenda AC10U router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...
Design/Logic Flaw
A component for parsing OXMF templates could be abused to execute arbitrary system commands that would be executed as the non-privileged runtime user. Users and attackers could run system commands with limited privilege to gain unauthorized access to confidential information and potentially viola...
CVE-2023-29048
A component for parsing OXMF templates could be abused to execute arbitrary system commands that would be executed as the non-privileged runtime user. Users and attackers could run system commands with limited privilege to gain unauthorized access to confidential information and potentially viola...
CVE-2023-29048
Open-Xchange App Suite (backend) is affected by CVE-2023-29048, impacting the Open-Xchange App Suite v7.10.x line (example reference cites 7.10.6-rev50). The root cause is a flaw in the OXMF template parser that could be abused to execute arbitrary system commands as the non-privileged runtime us...
CVE-2023-29048
A component for parsing OXMF templates could be abused to execute arbitrary system commands that would be executed as the non-privileged runtime user. Users and attackers could run system commands with limited privilege to gain unauthorized access to confidential information and potentially viola...
CVE-2023-49312
Precision Bridge PrecisionBridge.exe aka the thick client before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address...
Design/Logic Flaw
Precision Bridge PrecisionBridge.exe aka the thick client before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address...
CVE-2023-49312
Precision Bridge PrecisionBridge.exe aka the thick client before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address...
CVE-2023-49312
CVE-2023-49312 affects Precision Bridge's Thick Client (PrecisionBridge.exe) prior to version 7.3.21. The root cause is an integrity violation that enables reuse of the same license key across multiple systems. Reported attack vectors involve a Process Hacker memory dump, inspecting error message...
Mint Bio NFT with mismatched SVG
Lines of code Vulnerability details Impact The tokenURI function of a given NFT contract must represent truth about the given tokenid. The Bio contract allows for minting of NFTs using a bio string. The tokenURI of a minted Bio NFT in turn generates a JSON response. This JSON payload includes the...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the integrity of protected information
The multiple vulnerabilities in the libffi3 package of the Debian GNU/Linux operating system may lead to a violation of the integrity of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the integrity of protected information
The multiple vulnerabilities in the libstdc++6-dev package of the Debian GNU/Linux operating system may lead to a violation of the integrity of protected information. These vulnerabilities can be exploited remotely...
SSH Diffie-Hellman Modulus <= 1024 Bits (Logjam)
The remote SSH server allows connections with one or more Diffie-Hellman moduli less than or equal to 1024 bits. Through cryptanalysis, a third party can find the shared secret in a short amount of time depending on modulus size and attacker resources. This allows an attacker to recover the...
The vulnerability of the Acrobat text viewer program allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Acrobat text viewing program is related to a violation of memory integrity. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...
The vulnerability of the Acrobat text viewer program allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Acrobat text viewing program is related to a violation of memory integrity. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...
The vulnerability of the Acrobat text viewer program allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Acrobat text viewing program is related to a violation of memory integrity. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...
The vulnerability of the Acrobat text viewer program allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Acrobat text viewing program is related to a violation of memory integrity. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...
The vulnerability of the Acrobat text viewer program allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Acrobat text viewing program is related to a violation of memory integrity. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...
The vulnerability of the Adobe Reader text viewer allows a perpetrator to execute arbitrary code or cause a service failure.
The vulnerability of the Adobe Reader text viewer is related to a violation of memory integrity. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...
The vulnerability of the Acrobat text viewer program allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Acrobat text viewing program is related to a violation of memory integrity. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...