PT-2021-20140

Name of the Vulnerable Software and Affected Versions Foris versions prior to 101.1.1 Description The issue is related to a lack of certain HTML escaping in the login template. This could potentially lead to security issues, but specific details about exploitation or affected devices are not...

CVE-2018-10340

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2018. Notes: none...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2020. Notes: none...

Exploit for Out-of-bounds Write in Accfly 720P_Firmware

PoC exploit for CVE-2020-25782, CVE-2020-25783, CVE-2020-25784,...

MediaWiki 跨站请求伪造漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. It can be used to deploy in-house knowledge management and content management systems. MediaWiki suffers from a cross-site request forgery vulnerability that stems from not having protection...

CVE-2020-13197

CVE-2020-13197 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

CVE-2020-36206

An issue was discovered in the rusb crate before 0.7.0 for Rust. Because of a lack of Send and Sync bounds, a data race and memory corruption can occur...

PT-2021-12254

Name of the Vulnerable Software and Affected Versions IBM Security Identity Governance and Intelligence version 5.2.6 Description The issue is related to the lack of authentication for certain functionality that requires a provable user identity or consumes significant resources. Recommendations...

Query Binding Exploitation

illuminate/database is vulnerable to query binding exploitation. The vulnerability exists through the lack of control on the expected bindings in the Query Builder...

PT-2021-1878

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager DCNM, which could allow a remote...

PT-2021-2199

Name of the Vulnerable Software and Affected Versions: Cisco Data Center Network Manager DCNM affected versions not specified Description: The issue is related to multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager DCNM, which could allow an authenticated, remot...

PT-2021-1842

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager DCNM, which could allow a remote...

PT-2021-1876

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager DCNM affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager DCNM, which could allow a remote...

PT-2021-12207

Name of the Vulnerable Software and Affected Versions IBM Planning Analytics version 2.0 Description The issue is caused by the lack of server hostname verification for SSL/TLS communication, allowing a remote attacker to obtain sensitive information by sending a specially-crafted request...

PT-2021-11435

Name of the Vulnerable Software and Affected Versions: NETGEAR R7450 version 1.2.0.62 1.0.1 Description: This issue allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 routers. Authentication is not required to exploit this issue. The...

Siemens JT2Go RGB and SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of RG...

Microsoft Windows splwow64 Untrusted Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the user-mode...

Delta Industrial Automation DOPSoft XLS File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote atackers to execute arbitrary code on affected installations of Delta Industrial Automation DOPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Delta Industrial Automation CNCSoft ScreenEditor DPB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Industrial Automation CNCSoft ScreenEditor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...