D-Link DIR-605L/DIR-618 formVirtualServ Function Access Control Error Vulnerability

The D-Link DIR-605L and D-Link DIR-618 are both a wireless router from China-based AUO D-Link. An Access Control Error vulnerability exists in the D-Link DIR-605L and D-Link DIR-618 that stems from improper access control of the file /goform/formVirtualServ, which can be exploited by an attacker ...

CVE-2022-43769

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain web services to set property values which contain Spring templates that are interpreted downstream...

MAL-2025-1077 Malicious code in com.unity.services.core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 570e09325b7eeead7439db1cd6a223b5de2ddab48982af7bb43957a6c48d9069 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

D-Link DIR-816A2 form2Wan.cgi Component Access Control Error Vulnerability

The D-Link DIR-816A2 is a router from China's AUO D-Link. The D-Link DIR-816A2 suffers from an Access Control Error vulnerability that stems from improper access control of the form2Wan.cgi component, which can be exploited by an unauthenticated attacker to set up WAN services via a specially...

The vulnerability of the Launch Services interface for macOS operating systems allows attackers to bypass the sandbox protection mechanism.

The vulnerability of the Launch Services interface for MacOS systems is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to bypass the sandbox’s security mechanisms...

CVE-2023-50733

A Server-Side Request Forgery SSRF vulnerability has been identified in the Web Services feature of newer Lexmark devices...

CVE-2023-50733

CVE-2023-50733 is a real SSRF vulnerability in Lexmark devices’ Web Services feature. Affected: newer Lexmark devices; Vulnerable component: Web Services; Root cause: SSRF (no deeper technical detail provided in the documents). Impact (per metrics): CVSS 3.1 base score 8.6, HIGH confidentiality i...

PT-2025-4290 · Oracle · Oracle Hyperion Data Relationship Management

Name of the Vulnerable Software and Affected Versions: Oracle Hyperion Data Relationship Management version 11.2.19.0.000 Description: The issue is related to the Web Services component of Oracle Hyperion Data Relationship Management, allowing a high-privileged attacker with network access via HT...

Windows Remote Desktop Services Remote Code Execution Vulnerability

...

The vulnerability of Remote Desktop Services (RDS) for Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of Remote Desktop Services RDS for Microsoft Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2024-49128 Windows Remote Desktop Services Remote Code Execution Vulnerability

...

Apache CXF Memory Consumption Vulnerability

Apache CXF is the United States Apache Apache Foundation of an open source Web services framework. The framework supports a variety of Web services standards , a variety of front-end programming APIs. Apache CXF has a memory consumption vulnerability that originates from a client-side pipeline th...

The vulnerability of the.NET Core software component “Update Services” allows a hacker to gain access to read local files.

The vulnerability of the .NET Core software “Update Services” is related to an incorrect limitation on the path to the directory. Exploiting this vulnerability could allow a malicious actor to gain read access to local files...

The vulnerability of the XML Services component of the Oracle BI Publisher software allows a hacker to execute arbitrary code.

The vulnerability of the XML Services component of the Oracle BI Publisher reporting tool is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Apache CXF Server-Side Request Forgery Vulnerability

Apache CXF is the United States Apache Apache Foundation of an open source Web services framework. The framework supports a variety of Web services standards , a variety of front-end programming APIs. Apache CXF has a server-side request forgery vulnerability that can be exploited by an attacker ...

Sharp JH-RV11 Security Vulnerability

The Sharp JH-RV11 is an energy management controller for cloud services from Sharp Japan. A security vulnerability exists in Sharp JH-RV11 Ver.B0.1.9.1 version and prior versions that stems from incorrect authentication...

PT-2023-18108 · Unknown · Text Services

Name of the Vulnerable Software and Affected Versions: Text Services affected versions not specified Description: In Text Services, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local...

PT-2023-18109 · Unknown · Text Services

Name of the Vulnerable Software and Affected Versions: In Text Services affected versions not specified Description: The issue allows determining whether an app is installed without query permissions due to side channel information disclosure. This could lead to local information disclosure with ...

CVE-2023-35351

Windows Active Directory Certificate Services AD CS Remote Code Execution Vulnerability...

CVE-2022-45127 CVE-2022-45127

Sewio’s Real-Time Location System RTLS Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to cross-site request forgery in its backup services. An attacker could take advantage of this vulnerability to execute arbitrary backup operations and cause a denial-of-service condition...