3196 matches found
PT-2020-17238 · Flexense · Dupscout Enterprise
Name of the Vulnerable Software and Affected Versions: Flexense DupScout Enterprise version 10.0.18 Description: A buffer overflow in the web server of Flexense DupScout Enterprise allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid parameter via a GET...
Denial Of Service (DoS)
intel-microcode is vulnerable to denial of service. A local attacker is able to crash the application due to insecure conditions check in the voltage modulation interface...
Denial Of Service (DoS)
wavwritehdr is vulnerable to denial of service. An attacker may cause a denial of service via a crafted snd file, during conversion to a wav file...
Buffer Overflow
DumpSysVar is vulnerable to buffer overflow. An attacker is able to cause unspecified impact via a long name in the DumpSysVar function...
Remote Code Execution (RCE)
mathTeX is vulnerable to remote code execution. The vulnerability allows remote attackers to execute arbitrary commands via shell metacharacters in the dpi tag...
Denial Of Service (DoS)
ghostscript is vulnerable to denial of service. A buffer overflow in FloydSteinbergDitheringC in contrib/gdevbjca.c allows a remote attacker to crash the application via a malicious PDF file...
Denial Of Service (DoS)
sox is vulnerable to denial of service. A reachable assertion abort in the function soxappendcomment in formats.c allows an attacker to crash the application via a malicious audio file...
PT-2020-17550 · Branca · Branca
Name of the Vulnerable Software and Affected Versions: branca versions prior to 0.10.0 Description: An issue was discovered where decoding tokens with invalid base62 data can cause the program to panic. This occurs when tokens with incorrect base62 encoding are supplied, which can lead to...
PT-2025-26457 · Selea · Targa 710 Inox +9
Name of the Vulnerable Software and Affected Versions: Selea Targa IP OCR-ANPR camera models, including iZero, Targa 512, Targa 504, Targa Semplice, Targa 704 TKM, Targa 805, Targa 710 INOX, Targa 750, and Targa 704 ILB affected versions not specified Description: A server-side request forgery SS...
Information Disclosure
frr is vulnerable to information disclosure. An insecure default permission issue allows an attacker to obtain confidential information via tools/frr.in and tools/frrcommon.sh.in...
PT-2020-16560 · Legion Of The Bouncy Castle · Legion Of The Bouncy Castle Bc
Name of the Vulnerable Software and Affected Versions: Legion of the Bouncy Castle BC versions 1.61 and earlier Legion of the Bouncy Castle BC-FJA versions 1.0.1.2 and earlier Description: The issue allows attackers to obtain sensitive information about a private exponent due to observable...
PT-2022-2032
Name of the Vulnerable Software and Affected Versions Spring Framework versions prior to 5.2.20 and 5.3.18 Spring Boot versions prior to 2.5.12 and 2.6.6 libspring-aop-java - 4.3.22-4ubuntu0.1esm1 libspring-beans-java - 4.3.22-4ubuntu0.1esm1 libspring-context-java - 4.3.22-4ubuntu0.1esm1...
CSE Bookstore 1.0 - Authentication Bypass
Exploit Title: CSE Bookstore Authentication Bypass Date: 27/10/2020 Exploit Author: Alper Basaran Vendor Homepage: https://projectworlds.in/ Software Link: https://github.com/projectworlds32/online-book-store-project-in-php/archive/master.zip Version: 1.0 Tested on: Windows 10 Enterprise 1909 CSE...
PT-2020-16526 · Ruckus · Ruckus Vriot
Name of the Vulnerable Software and Affected Versions: Ruckus vRioT versions 1.5.1.0.21 and earlier Description: The issue concerns an API backdoor that is hardcoded into the validate token.py file. This backdoor allows an unauthenticated attacker to interact with the service API by using a...
PT-2020-20855 · Apple · Watchos +3
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.6 iPadOS versions prior to 13.6 macOS Catalina versions prior to 10.15.6 watchOS versions prior to 6.2.8 Description: A memory corruption issue was addressed with improved input validation. A remote attacker may be ab...
MedDream PACS Server 6.8.3.751 - Remote Code Execution (Unauthenticated)
!/usr/bin/python Exploit Title: MedDream PACS Server 6.8.3.751 - Remote Code Execution Unauthenticated Exploit Author: bzyo Twitter: @bzyo Date: 10-10-2020 Vulnerable Software: https://www.softneta.com/products/meddream-pacs-server/ Vendor Homepage: https://www.softneta.com Version: 6.8.3.751...
PT-2020-6454 · Apple · Ipados +3
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.0.1 watchOS versions prior to 7.1 iOS versions prior to 12.4.9 and prior to 14.2 watchOS versions prior to 6.2.9 and prior to 5.3.9 macOS Catalina versions prior to 10.15.7 Supplemental Update and prior to 10.15.7...
Denial Of Service (DoS)
tensorflow is vulnerable to denial of service. A NULL pointer dereference in the linked snippet in eager mode allows an attacker to crash the application via segmentation fault when ctx-sessionstate returns nullptr...
Cross-Site Scripting (XSS)
snekserve is vulnerable to cross-site scripting XSS. A remote attacker is able to inject and execute arbitrary Javascript in a user's browser via the filenames that are rendered from the directory listings...
