Format string

It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within its setiperf3svr.cgi module. An unauthenticated remote attacker can exploit this vulnerability without privilege to perform remote arbitrary code...

BELL-CVE-2017-13087 CVE-2017-13087 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2017-9935 CVE-2017-9935 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2023-1175

Bulletin has no description...

BELL-CVE-2018-1000122 CVE-2018-1000122 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2018-18313 CVE-2018-18313 does not affect BellSoft software

Bulletin has no description...

MaxScale Unauthenticated Access

The vulnerability of the var/lib/maxscale/maxscale.cnf.d component of the MariaDB MaxScale proxy server is related to the lack of data encryption measures. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

CVE-2023-4342

Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy...

Omnibox Man-in-the-Middle

The vulnerability of the Omnibox address bar in Google Chrome relates to the lack of encryption measures for protected data. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...

Hitron CODA-5310 Configuration Interface Command Execution DoS

The vulnerability of the Hitron CODA-5310 cable gateway configuration interface is related to the absence of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands or cause service failures...

CVE-2021-4369: Missing Authorization

The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Content Injection in versions up to, and including, 18.2. This is due to lacking authorization protections, checks against users editing other's posts, and lacking a security nonce, all on the wpfmeditfiletitledesc AJ...

CVE-2023-2304

The Favorites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'userfavorites' shortcode in versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

PT-2023-22140 · Samsung · Exynos Modem 5123 +3

Name of the Vulnerable Software and Affected Versions: Exynos Mobile Processor and Modem versions for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and Exynos 1080 Description: An issue was discovered due to improper handling of parameters while binding a network interface, which can cause...

BELL-CVE-2023-2235 CVE-2023-2235 does not affect BellSoft software

Bulletin has no description...

SAP Diagnostic Agent Authentication Bypass

The vulnerability of the SAP Diagnostic Agent relates to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to compromise confidentiality, integrity, and accessibility...

SAP Diagnostics Agent 访问控制错误漏洞

SAP Diagnostics Agent is a system diagnostics agent program from SAP, Germany. An access control error vulnerability exists in SAP Diagnostics Agent version 720, which stems from a lack of authentication and insufficient input validation...

Python Redis Library Unauthorized Access

The vulnerability of the Python Redis library, redis-py, is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2023-12849 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue, such as its nature or potential impact. There is no mention of estimated...

WordPress plugin Easy Digital Downloads 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogging sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

SUSE CVE-2020-12244

An issue has been found in PowerDNS Recursor 4.1.0 through 4.3.0 where records in the answer section of a NXDOMAIN response lacking an SOA were not properly validated in SyncRes::processAnswer, allowing an attacker to bypass DNSSEC validation...