PT-2022-1749 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to the browser's failure to properly enforce web page structure protection, potentially allowing a remote attacker to perform cross-site scripting...

CVE-2021-39966

There is an Uninitialized AOD driver structure in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2021-39966

There is an Uninitialized AOD driver structure in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality...

PT-2022-11093

Name of the Vulnerable Software and Affected Versions Smartphones affected versions not specified Description The issue is related to an Uninitialized AOD driver structure in smartphones. Successful exploitation of this issue may affect service confidentiality. Recommendations At the moment, ther...

CVE-2021-39966: Missing Initialization of Resource

There is an Uninitialized AOD driver structure in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality...

Code Injection in microweber/microweber

Description HTML Injection is a vulnerability in which the attacker can inject malicious html content in the webpage. Proof of Concept 1 Admin has enabled Comments module, so that people can comment on a blog post. 2 Attacker post the following comment: SOMETHING+SOMETHING Now, observe the change...

PT-2025-8584

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free bug in the Linux kernel has been identified. The issue arises from the cleanup srcu struct function not checking for a grace period that has not yet started but might...

PT-2021-27291

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.12 Description The issue is related to incorrect structure access in the Marvell Prestera network component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

Rust acc_reader crate has an unspecified vulnerability

Rust accreader crate is a structure that provides an AccReader that wraps an arbitrary instance of std::io::Read and provides an implementation of std::io::Seek for it. memory location. No details of the vulnerability are currently available...

Adobe Dimension GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Dimension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of GIF...

The vulnerability of the host_alt_filter2 parameter in the device_list.php script of the Advantech R-SeeNet router monitoring software allows a hacker to disclose protected information.

The vulnerability of the hostaltfilter2 parameter in the devicelist.php script of the Advantech R-SeeNet monitoring software relates to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially...

The vulnerability of the Roundcube webmail client, related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary SQL code.

The vulnerability of the Roundcube webmail client stems from the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL code using the search or searchparams parameters...

The vulnerability of the McAfee Network Security Manager device management system, related to the failure to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the McAfee Network Security Manager device’s management system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using specially created malicious content...

PT-2021-5926

Name of the Vulnerable Software and Affected Versions NETGEAR GS108Tv2 versions prior to 5.4.2.36 NETGEAR GS110TPv2 versions prior to 5.4.2.36 Description The issue is related to stored XSS, which can be exploited by a remote attacker to conduct cross-site scripting attacks. This is due to the la...

PT-2021-5903

Name of the Vulnerable Software and Affected Versions NETGEAR R7000 versions prior to 1.0.9.88 Description The issue is related to a stored XSS in the NETGEAR R7000 devices, which is caused by the lack of protection measures for the web page structure. This could allow an attacker to perform...

PT-2021-5874

Name of the Vulnerable Software and Affected Versions NETGEAR CBR40 versions prior to 2.5.0.10 NETGEAR EAX20 versions prior to 1.0.0.32 NETGEAR EAX80 versions prior to 1.0.1.62 NETGEAR EX6120 versions prior to 1.0.0.64 NETGEAR EX6130 versions prior to 1.0.0.44 NETGEAR EX7000 versions prior to...

The vulnerability of the AADI GeoView Webservice, a software tool for meteorological observations, lies in the lack of protection for the SQL query structure, allowing attackers to execute arbitrary SQL commands.

The vulnerability of the AADI GeoView Webservice software for meteorological observations lies in the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

CVE-2021-44232

SAF-T Framework Transaction SAFTNG allows an attacker to exploit insufficient validation of path information provided by normal user, leading to full server directory access. The attacker can see the whole filesystem structure but cannot overwrite, delete, or corrupt arbitrary files on the server...

CVE-2021-44446

A vulnerability has been identified in JT Utilities All versions V13.0.3.0, JTTK All versions V11.0.3.0. JTTK library in affected products contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code ...

CVE-2021-44002

A vulnerability has been identified in JT Open All versions V11.1.1.0, JT Utilities All versions V13.1.1.0, Solid Edge All versions V2023. The Jt1001.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker t...