28030 matches found
Design/Logic Flaw
Improper Handling of Exceptional Conditions vulnerability in Daurnimator lua-http library allows Excessive Allocation and a denial of service DoS attack to be executed by sending a properly crafted request to the server. This issue affects lua-http: all versions before commit ddab283...
Design/Logic Flaw
Transient DOS in WLAN firmware while parsing MLO multi-link operation...
Design/Logic Flaw
Cerebrate before 1.15 lacks the Secure attribute for the session cookie...
Design/Logic Flaw
Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame...
Design/Logic Flaw
Transient DOS in Modem while processing RRC reconfiguration message...
The vulnerability of the programmable logic controller PLC-100, related to errors in TCP communication processing, allows a intruder to trigger a service failure.
The vulnerability of the programmable logic controller PLC-100 is related to errors in TCP communication processing. Exploiting this vulnerability can allow a remote attacker to cause service failures...
Design/Logic Flaw
Vyper is a Pythonic Smart Contract Language. For the following probably non-exhaustive list of expressions, the compiler evaluates the arguments from right to left instead of left to right. unsafeadd, unsafesub, unsafemul, unsafediv, powmod256, |, &, ^ bitwise operators, bitwiseor deprecated,...
Design/Logic Flaw
hyper-bump-it is a command line tool for updating the version in project files.hyper-bump-it reads a file glob pattern from the configuration file. That is combined with the project root directory to construct a full glob pattern that is used to find files that should be edited. These matched fil...
Design/Logic Flaw
Use After Free in GitHub repository vim/vim prior to 9.0.1858...
Design/Logic Flaw
Use After Free in GitHub repository vim/vim prior to 9.0.1857...
Design/Logic Flaw
Use After Free in GitHub repository gpac/gpac prior to 2.3-DEV...
Design/Logic Flaw
User enumeration vulnerability in Password Recovery plugin 1.2 version for Roundcube, which could allow a remote attacker to create a test script against the password recovery function to enumerate all users in the database...
Design/Logic Flaw
In imgsyscmdq, there is a possible use after free due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07340433; Issue ID: ALPS07340350...
Design/Logic Flaw
In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges...
Design/Logic Flaw
Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833...
Design/Logic Flaw
Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847...
Design/Logic Flaw
A vulnerability that poses a potential risk of polluting the MXsecurity sqlite database and the nsm-web UI has been identified in MXsecurity versions prior to v1.0.1. This vulnerability might allow an unauthenticated remote attacker to register or add devices via the nsm-web application...
Design/Logic Flaw
I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user originates a call on the device, then the device's modem may reset and cause the phone call to not succeed. This may block the user from dialing...