98617 matches found
Rack Modular Interface DoS
The vulnerability of the Ruby-based Rack web server’s modular interface is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Rack DoS
The vulnerability of the Ruby-based Rack web server module interface parser involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Rack::Utils get_byte_ranges DoS
The vulnerability of the Rack::Utils.getbyteranges function in the Rack web server module interface, a programming language for Ruby, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause service interruptions...
Django Synchronization DoS
The vulnerability of the Django web application framework is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Django URLField DoS
The vulnerability of the URLField.topython function in the Django web application framework is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Python Requests extract_zipped_paths File Upload
The vulnerability of the requests.utils.extractzippedpaths function in the Python Requests library is related to insecure temporary files. Exploiting this vulnerability could allow an attacker to re-record arbitrary files...
GLPI SQL Injection Code Execution
The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes is related to the lack of measures taken to protect the SQL request structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
WP Job Portal Blind SQL Injection
...
Rack Modular Interface Bypass
The vulnerability of the Ruby-based Rack web server’s modular interface is related to the occurrence of interpretation conflicts when processing HTTP headers’ names and values. Exploiting this vulnerability allows a remote attacker to bypass security restrictions...
Router EDIMAX BR-6478AC Code Execution
The vulnerability of the formPPPoESetup function in the microprogramming software for EDIMAX BR-6478AC routers lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures...
D-Link DI-8400 Router Buffer Overflow
The vulnerability of D-Link DI-8400 router microprogramming software is related to the execution of operations outside the buffer in memory when processing the dbsrv.asp file. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...
TRENDnet TEW-432BRP formSysCmd() Code Execution
The vulnerability of the formSysCmd function in TRENDnet TEW-432BRP router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...
TRENDnet TEW-432BRP Form SysCmd Command Execution
The vulnerability of the formSysCmd function in TRENDnet TEW-432BRP router microprogramming software is related to the failure to take measures to neutralize special elements in the output data. Exploiting this vulnerability may allow a remote attacker to execute arbitrary commands...
TRENDnet TEW-432BRP Form Wipe Command Execution
The vulnerability of the formWlanSetup function in TRENDnet TEW-432BRP router software lies in the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Tenda W12 Router Code Execution
The vulnerability of the cgiSysTimeInfoSet function in the Tenda W12 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...
router EDIMAX BR-6478AC Code Execution
The vulnerability of the formUSBAccount function in the microprogramming-based router EDIMAX BR-6478AC lies in the fact that the operation’s output escapes the buffer and is stored in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
router EDIMAX BR-6478AC Code Execution
The vulnerability of the formUSBFolder function in the microprogramming-based router EDIMAX BR-6478AC lies in the fact that the operation’s output goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Router EDIMAX BR-6478AC Code Execution
The vulnerability of the formWanTcpipSetup function in the microprogramming software for the EDIMAX BR-6478AC router lies in the fact that the operation’s output is stored outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
TOTOLINK N300RH Router Code Execution
The vulnerability of the setWiFiBasicConfig function in the TOTOLINK N300RH router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
OTRS Database Module Bypass
The vulnerability of the database module of the OTRS request processing system is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to bypass existing security mechanisms remotely...
cpp-httplib parse_header() Data Compromise
The vulnerability of the parseheader function in the cpp-httplib library is related to deficiencies in HTTP request processing. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
RoundCube Webmail XSS
The vulnerability of the RoundCube Webmail client stems from the lack of protection for the website’s structure during the processing of the topic field in the preliminary version. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
Framework Component Privilege Escalation
The vulnerability of the Framework component in Android operating systems is related to incorrect code generation management. Exploiting this vulnerability can allow attackers to enhance their privileges...
Android DevicePolicyManagerService DoS
The vulnerability of the DevicePolicyManagerService.java class in the Android operating system framework is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
ApkChecksums Java Verify Signature DoS
The vulnerability of the verifySignature method in the ApkChecksums.java class of the Framework operating system component in Android involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to cause a service failure...
Framework Component DoS
The vulnerability of the Framework component in Android operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service failures...
AppOpsService Java Disclosure
The vulnerability of the AppOpsService.java class in the Android operating system framework components is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by these components...
Android Framework setTo ResourceTypes.cpp Disclosure
The vulnerability of the setTo method in the ResourceTypes.cpp script of the Android operating system’s Framework component is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is...
Framework Component Privilege Escalation
The vulnerability of the Framework component in Android operating systems relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Android Framework Component Privilege Escalation
The vulnerability of the PackageInstallerService.java class in the Android operating system framework is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges...
Android DomainVerificationService approvalLevelForDomainInternal Privilege Escalation
The vulnerability of the approvalLevelForDomainInternal method in the DomainVerificationService.java class of the Android operating system framework component is related to incorrect code generation management. Exploiting this vulnerability could allow an attacker to enhance their privileges...
Android Framework resumeConfigurationDispatch Privilege Escalation
The vulnerability of the resumeConfigurationDispatch method in the ActivityRecord.java class of the Android operating system’s Framework component is related to improper code generation. Exploiting this vulnerability could allow an attacker to gain increased privileges...
Framework Android validateNode ResourceTypes.cpp Privilege Escalation
The vulnerability of the validateNode method in the ResourceTypes.cpp component of the Android operating system’s framework is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to gain increased privileges...
WindowState.java Class Privilege Escalation
The vulnerability of the WindowState.java class in the Framework component of Android operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Framework Component Privilege Escalation
The vulnerability of the Framework component in Android operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Android Privilege Escalation
The vulnerability of Android operating systems is related to the breach of data protection mechanisms during the pairing of Bluetooth devices. Exploiting this vulnerability allows a remote attacker to enhance their privileges...
UBSAN_throwing_runtime.cpp Heap Buffer Overflow DoS
The vulnerability in the ubsanthrowingruntime.cpp script of Android operating systems is related to a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
UBSAN_throwing_runtime.cpp Heap Buffer Overflow DoS
The vulnerability in the ubsanthrowingruntime.cpp script of Android operating systems is related to a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
UBSAN_throwing_runtime.cpp Heap Buffer Overflow DoS
The vulnerability in the ubsanthrowingruntime.cpp script of Android operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a perpetrator to cause a service failure...
UBSAN_throwing_runtime.cpp Heap Buffer Overflow DoS
The vulnerability in the ubsanthrowingruntime.cpp script of Android operating systems is related to a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
UBSAN_throwing_runtime.cpp Heap Buffer Overflow DoS
The vulnerability in the ubsanthrowingruntime.cpp script of Android operating systems is related to a numerical overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
Android setUserDisclaimerAcknowledged Privilege Escalation
The vulnerability of the setUserDisclaimerAcknowledged method in the CarDevicePolicyService.java class of Android operating systems is related to an incorrect restriction on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor to increase their...
Android Improper Privilege Escalation
The vulnerability of Android operating systems is related to improper handling of code generation. Exploiting this vulnerability can allow attackers to enhance their privileges...
TRENDnet TEW-432BRP formWPS() Code Execution
The vulnerability of the formWPS function in TRENDnet TEW-432BRP router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...
TRENDnet TEW-432BRP formSetRoute() Code Execution
The vulnerability of the formSetRoute function in TRENDnet TEW-432BRP software relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service interruptions...
TRENDnet TEW-432BRP formSetDomainFilter Heap Buffer Overflow DoS
The vulnerability of the formSetDomainFilter function in TRENDnet TEW-432BRP router software lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...
TRENDnet TEW-432BRP formSetProtocolFilter Heap Buffer Overflow DoS
The vulnerability of the formSetProtocolFilter function in TRENDnet TEW-432BRP router software lies in the fact that the operation’s output goes beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...
TRENDnet TEW-432BRP formSetUrlFilter Code Execution
The vulnerability of the formSetUrlFilter function in TRENDnet TEW-432BRP router software lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service interruptions...
TRENDnet TEW-432BRP formSetWlanEncrypt Heap Buffer Overflow DoS
The vulnerability of the formSetWlanEncrypt function in TRENDnet TEW-432BRP router software lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service interruptions...
Tenda W12 Router Code Execution
The vulnerability of the cgiWifiMacFilterSet function in the microprogramming-based router software of Tenda W12 lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...