D-Link DIR-605L 安全漏洞

The D-Link DIR-605L is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-605L version 2.13B01 BETA, which originates from the webpage parameter of the formSetWanL2TP function in the /goform/formSetWanL2TP page that fails to correctly validate the...

Sonarr 输入验证错误漏洞

Sonarr is a software from Sonarr that helps find, download and organize TV shows. An input validation error vulnerability exists in versions prior to Sonarr 4.0.9.2244, which originates from a redirection to an untrusted site...

WordPress plugin Payflex Payment Gateway 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error...

Esri Portal For ArcGIS 输入验证错误漏洞

Esri Portal For ArcGIS is a component from Environmental Systems Research Institute Esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. An input validation error vulnerability exists in Esri Portal For ArcGIS that stems fr...

GNOME Project G Structured File Library 输入验证错误漏洞

GNOME Project G Structured File Library GNOME libgsf is a GNOME project open-sourced by GNOME. Provides an abstraction layer for different structured file formats. An input validation error vulnerability exists in GNOME Project G Structured File Library version v1.14.52, which stems from the...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. Mozilla Firefox suffers from an origin validation error that originates...

CVE-2024-9392: Origin Validation Error

A compromised content process could have allowed for the arbitrary loading of cross-origin pages. This vulnerability affects Firefox 131, Firefox ESR 128.3, Firefox ESR 115.16, Thunderbird 128.3, and Thunderbird 131...

Google Go 输入验证错误漏洞

Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google, Inc. An input validation error vulnerability exists in Google Go that stems from the system not properly validating input, which allows a user to pass arbitrary parameters to the...

Rockwell Automation SequenceManager Input Validation Error Vulnerability

Rockwell Automation SequenceManager is a basic controller-based batch management from Rockwell Automation USA. An input validation error vulnerability exists in versions of Rockwell Automation SequenceManager prior to 2.0, which can be exploited by an attacker to send an incorrectly formatted...

Eclipse GlassFish 输入验证错误漏洞

Eclipse GlassFish is an open source application server from the Eclipse Foundation. An input validation error vulnerability exists in Eclipse GlassFish versions prior to 7.0.17, which stems from a Host HTTP parameter that may cause a web application to redirect to a specified URL when the request...

Scout 输入验证错误漏洞

Scout is an open source platform from Clinical Genomics for analyzing VCFs and being able to aid collaborations to solve rare diseases faster. An input validation error vulnerability exists in Scout versions prior to 4.89 that stems from the presence of an open redirection vulnerability that allo...

Rockwell Automation SequenceManager 安全漏洞

Rockwell Automation SequenceManager is a basic controller-based batch management from Rockwell Automation USA. An input validation error vulnerability exists in versions of Rockwell Automation SequenceManager prior to 2.0, which can be exploited by an attacker to send an incorrectly formatted...

CUPS libppd Input Validation Error Vulnerability

CUPS is a standards-based open source printing system. An input validation error vulnerability exists in CUPS libppd, which can be exploited by an attacker to execute arbitrary code on the system...

CUPS libcupsfilters Input Validation Error Vulnerability

CUPS is a standards-based open source printing system. An input validation error vulnerability exists in CUPS libcupsfilters, which can be exploited by an attacker to bypass security restrictions, add a malicious printer or directly hijack an existing printer...

Google Chrome Input Validation Error Vulnerability (CNVD-2024-39745)

Google Chrome is a web browser from Google, an American company. An input validation error vulnerability exists in versions of Google Chrome prior to 128.0.6537.0, which can be exploited by remote attackers to execute elevation of privilege via a malicious file...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. An input validation error vulnerability exists in versions of Google Chrome prior to 128.0.6537.0, which can be exploited by remote attackers to execute elevation of privilege via a malicious file...

IBM Business Automation Workflow Input Validation Error Vulnerability (CNVD-2024-46816)

IBM Business Automation Workflow is a suite of workflow automation solutions from International Business Machines IBM. The product is primarily used for workflow management, compliance management, and features workflow visibility and scalability. An input validation error vulnerability exists in...

Red Hat Keycloak 输入验证错误漏洞

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. An input validation error vulnerability exists in Red Hat Keycloak versions prior to 25.0.6, which stems from a configuration error that allows...

IBM Business Automation Workflow 安全漏洞

IBM Business Automation Workflow is a suite of workflow automation solutions from International Business Machines IBM. The product is primarily used for workflow management, compliance management, and features workflow visibility and scalability. An input validation error vulnerability exists in...

CIRCUTOR TCP2RS+ 输入验证错误漏洞

CIRCUTOR TCP2RS+ is an Ethernet converter from CIRCUTOR. An input validation error vulnerability exists in CIRCUTOR TCP2RS+ version 1.3b, which originates from a vulnerability that allows an attacker to modify any configuration value without authentication, resulting in invalidating the device's...