PT-2026-22759

Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean Blind SQL Injection attack on the endpoint /ui/rest-proxy/campaign/statistic for the View Campaign page via the sortColumn HTTP GET parameter. This allows an attacker to access sensitive...

Apache Hive SQL注入漏洞

Apache Hive is a set of data warehouse software based on Hadoop Distributed Systems Infrastructure from the Apache Apache Foundation in the United States. The software provides a data integration approach and a high-level query language to support large-scale data analysis on Hadoop. Apache Hive...

CVE-2025-60685

CVE-2025-60685 affects Totolink A720R router firmware V4.1.5cu.614_B20230630 in the sysconf binary (sub_401EE0). The function reads /proc/stat using fgets() into a local buffer and then parses the line with sscanf() into a single-byte variable using %s, which can overflow the stack memory. This c...

EUVD-2024-37310

Malicious code in bioql PyPI...

EUVD-2023-1465

Malicious code in bioql PyPI...

CVE-2023-33004

A missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read permission to reset profiler statistics...

CVE-2022-45398

A cross-site request forgery CSRF vulnerability in Jenkins Cluster Statistics Plugin 0.4.6 and earlier allows attackers to delete recorded Jenkins Cluster Statistics...

CVE-2024-38409

Memory corruption while station LL statistic handling...

CVE-2024-11959

A vulnerability was found in D-Link DIR-605L 2.13B01. It has been classified as critical. This affects the function formResetStatistic of the file /goform/formResetStatistic. The manipulation of the argument curTime leads to buffer overflow. It is possible to initiate the attack remotely. The...

CVE-2024-38409

Memory corruption while station LL statistic handling...

CVE-2024-38409 Buffer Copy Without Checking Size of Input in WLAN Windows Host

Memory corruption while station LL statistic handling...

CVE-2024-38409

CVE-2024-38409 is described across multiple sources as a memory corruption vulnerability involving station LL statistic handling. The primary CVE record lists a CVSS v3.1 base score of 7.8 (LOCAL attack vector, LOW privilege, NO user interaction; high impact on confidentiality, integrity, availab...

CVE-2024-38409 Buffer Copy Without Checking Size of Input in WLAN Windows Host

Memory corruption while station LL statistic handling...

WordPress WP ULike plugin <= 4.7.4 - Cross-Site Request Forgery to Statistic Deletion vulnerability

Cross-Site Request Forgery to Statistic Deletion vulnerability discovered by Bilal Chawich Duke in WordPress Plugin WP ULike versions = 4.7.4...

Exploit for Race Condition in Openbsd Openssh

0.省流 这本质上是一种统计漏洞：需要进行大量尝试才能赢得竞争条件并成功执行任意代码，攻击者需要克服很多障碍，”Schwa...

CVE-2024-27400 drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: once more fix the call oder in amdgputtmmove v2 This reverts drm/amdgpu: fix ftrace event amdgpubomove always move on same heap. The basic problem here is that after the move the old location is simply not available a...

CVE-2024-27400

CVE-2024-27400 affects the Linux kernel drm/amdgpu subsystem. The issue stems from the call order in amdgpu_ttm_move() which caused the old location to become unavailable after a move, affecting DMA-buf and VM move notifications. The fix prioritizes notifying the move before performing the actual...

CVE-2021-46940

In the Linux kernel, the following vulnerability has been resolved: tools/power turbostat: Fix offset overflow issue in index converting The idxtooffset function returns type int 32-bit signed, but MSRPKGENERGYSTAT is u32 and would be interpreted as a negative number. The end result is that it hi...

Cross-site Scripting (XSS)

Concrete5/concrete5 is vulnerable to Cross-site Scripting. This vulnerability exists due to the lack of user input sanitization, which allows an attacker to inject and execute malicious JavaScript in the browser through the e Header and Footer Tracking Codes of the SEO & Statistic...

CVE-2023-39236

ASUS RT-AC86U Traffic Analyzer - Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit this vulnerability to perform command injection attack to execute arbitrary commands, disrupt system or terminate services...