112889 matches found
ROS-20260922-73-0133
The vulnerability in Python-Django is related to uncontrolled memory allocation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260922-73-0112
The vulnerability in the 389-ds-base is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260922-73-0053
The vulnerability of the chapservercomputehash function in the drivers/target/iscsi/iscsitargetauth.c module of the Linux kernel’s TCM driver is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...
USN-8797-1 gst-plugins-base1.0 vulnerability
It was discovered that GStreamer Base Plugins incorrectly handled certain OGG media files. A remote attacker could possibly use this issue to execute arbitrary code if it opened a specially crafted file...
CVE-2008-5862-EXPLOIT
CVE-2008-5862 - Directory traversal vulnerability in webcamXP 5.3.2.375 and 5.3.2.410 This repository contains an exploit for CVE-2008-5862, a security vulnerability discovered in versions 5.3.2.375 and 5.3.2.410 build 2132 of webcamXP. The exploit leverages a directory traversal flaw, allowing...
io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values
A flaw was found in Netty. A remote attacker could exploit this vulnerability by sending specially crafted HTTP/1.1 chunked transfer encoding extension values. Due to incorrect parsing of quoted strings, this flaw enables request smuggling attacks, potentially allowing an attacker to bypass...
USN-8786-1 rsyslog vulnerability
It was discovered that rsyslog incorrectly calculated buffer sizes when replacing strings. A remote attacker could possibly use this issue to cause rsyslog to crash, resulting in a denial of service...
USN-8789-1: strongSwan vulnerabilities
It was discovered that strongSwan incorrectly handled PKCS7 containers in the openssl plugin. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service. CVE-2026-78123 It was discovered that strongSwan incorrectly handled memory when enumeratin...
CVE-2024-1304---Badgermeter-moni-tool-Reflected-Cross-Site-Scripting-XSS
CVE-2024-1304 --- Badgermeter moni tool - Reflected Cross Site Scripting XSS https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool CVE-2024-1304: 6.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L | CWE-79. Software link :...
CVE-2002-0348
CVE-2002-0348 service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service Packetstorm publication at https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html SecurityFocus publication at https://www.securityfocus.com/bid/4209 Author Alex Hernandez aka @alt3kx Vendo...
CVE-2026-51565
CVE-2026-51565 Security Advisory for CVE-2026-51565 Description Cross-site scripting XSS vulnerability in Modules/Docs/DocsController.php in Milk admin =0.9.8 allows remote attackers to inject arbitrary web script or HTML via the action parameter in a crafted request Mitigation At the time of...
Linux Distros Unpatched Vulnerability : CVE-2023-4860
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer process to potentially...
The vulnerability of the CWMP/TR-069 protocol implementation in TP-Link Archer VX1800v V1 software allows a hacker to execute arbitrary code with root privileges, resulting in complete system compromise.
The vulnerability of the CWMP/TR-069 protocol implementation of TP-Link Archer VX1800v V1 software lies in the lack of measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root...
The vulnerability of the Windows Imaging Component (WIC) in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Windows Imaging Component WIC in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
ROS-20260921-73-0005
The vulnerability in ElasticSearch is related to algorithmic complexity. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260921-73-0006
The vulnerability in ElasticSearch is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260921-73-0085
The vulnerability is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260921-73-0090
The vulnerability is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the State Snapshot Transfer (SST) mechanism of the MariaDB database management system allows attackers to execute arbitrary commands.
The vulnerability of the State Snapshot Transfer SST mechanism of the MariaDB database management system is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...