F5 BIG-IP APM 安全漏洞

F5 BIG-IP APM is a suite of access and security solutions from F5 USA. The product provides unified access to business-critical applications and networks. A source validation error vulnerability exists in the F5 BIG-IP APM Browser Web Access VPN Client, which can be exploited by an attacker to...

Lunary Input Validation Error Vulnerability

lunary is a production toolkit for LLM. An input validation error vulnerability exists in lunary that stems from improper validation of email addresses during the registration process and can be exploited by an attacker to create multiple accounts with the same email address by changing the case ...

JFrog Artifactory 输入验证错误漏洞

JFrog Artifactory is an open source, general-purpose Artifact repository manager from Israel's JFrog that supports clustered and high-availability Docker registries and provides an end-to-end solution for automating artifacts for tracking from development to production. JFrog Artifactory has an...

QNAP Systems QTS、QuTS hero和QuTScloud 输入验证错误漏洞

QNAP Systems QuTScloud and others are products of China-based Weilian Technology QNAP Systems.QNAP Systems QuTScloud is a cloud-optimized version of the QNAP NAS operating system.QNAP Systems QTS is an operating system for entry- to mid-range QNAP NAS use. QNAP Systems QuTS hero is an operating...

Hyperion 输入验证错误漏洞

Hyperion is an open source bias or ambient lighting implementation of the Hyperion project. An input validation error vulnerability exists in Hyperion version 2.0.15 that stems from the presence of a Unicode conversion vulnerability that could allow an attacker to send Unicode characters with a...

Tenda AC500 fromDhcpListClient method list1 parameter buffer overflow vulnerability

Tenda AC500 is the wireless controller device introduced, designed for small and medium-sized businesses, with support for managing wireless networks across VLANs. A buffer overflow vulnerability exists in the Tenda AC500, which stems from the list1 parameter of the fromDhcpListClient method...

Google Chrome Data Validation Error Vulnerability (CNVD-2024-29288)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a data validation error vulnerability that can be exploited by attackers to bypass security restrictions...

Google Chrome Data Validation Error Vulnerability

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a Data Validation Error vulnerability, which can be exploited by attackers to inject script or HTML into a privileged page via a malicious file...

SolarWinds Platform 输入验证错误漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. An input validation error vulnerability exists in SolarWinds Platform that stems from an attacker being able to redirect a user to a different domain when using URL...

Tenda FH1205 安全漏洞

The Tenda FH1205 is a dual-band wireless router for home users that supports the IEEE 802.11ac standard for wireless rates up to 1200Mbps, and operates in both 2.4GHz and 5GHz bands. The Tenda FH1205 suffers from a buffer overflow vulnerability that stems from the PPW parameter of the...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a data validation error vulnerability that can be exploited by attackers to bypass security restrictions...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a Data Validation Error vulnerability, which can be exploited by attackers to inject script or HTML into a privileged page via a malicious file...

WordPress Plugin Freshdesk 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An input validation error...

Gradio 输入验证错误漏洞

Gradio is an open source Python library that is a way to demonstrate machine learning models through a friendly web interface. Gradio suffers from an input validation error vulnerability that stems from the presence of a server-side request forgery vulnerability that allows an attacker to scan an...

AnythingLLM 输入验证错误漏洞

AnythingLLM is a document chatbot that meets business requirements. AnythingLLM suffers from an input validation error vulnerability that stems from a failure to properly clean user-supplied input, allowing an attacker to read and delete arbitrary files on the server...

AnythingLLM 输入验证错误漏洞

AnythingLLM is a document chatbot that meets business requirements. AnythingLLM suffers from an input validation error vulnerability that stems from allowing an attacker to delete all existing users and potentially create new administrator users without a password, leading to unauthorized access...

Huawei HarmonyOS/EMUI Data Validation Error Vulnerability

Huawei HarmonyOS is a distributed operating system developed independently by Huawei Technologies Co. Huawei EMUI is Huawei's emotional operating system based on Android. A data validation error vulnerability exists in Huawei HarmonyOS/EMUI, which originates from a data validation error...

Apache Zeppelin Input Validation Error Vulnerability (CNVD-2024-17934)

Apache Zeppelin is a Web-based open source laptop application from the Apache USA Foundation. The program supports interactive data analysis and collaborative documentation. Apache Zeppelin suffers from an input validation error vulnerability that can be exploited by an attacker to view a server...

Apache Zeppelin Input Validation Error Vulnerability (CNVD-2024-17935)

Apache Zeppelin is a Web-based open source laptop application from the Apache USA Foundation. The program supports interactive data analysis and collaborative documentation. Apache Zeppelin has an input validation error vulnerability that can be exploited by an attacker to cause a denial of servi...

Apache Zeppelin Input Validation Error Vulnerability (CNVD-2024-17937)

Apache Zeppelin is a Web-based open source laptop application from the Apache USA Foundation. The program supports interactive data analysis and collaborative documentation. Apache Zeppelin suffers from an input validation error vulnerability that can be exploited by an attacker to execute a...