The vulnerability of the fromGstDhcpSetSer() function in the microprogramming software for Tenda FH451 allows a attacker to cause a service failure.

The vulnerability of the fromGstDhcpSetSer function in the Tenda FH451 router’s microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the fromP2pListFilter (/goform/P2pListFilter) function in the Tenda CX12L Wi-Fi router software allows a hacker to trigger a service failure.

The vulnerability of the fromP2pListFilter /goform/P2pListFilter function in the Tenda CX12L Wi-Fi router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafted POST request...

The vulnerability of the fromPPTPUserSetting function (/goform/PPTPUserSetting) in the Tenda F453 router software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromPPTPUserSetting function /goform/PPTPUserSetting of the Tenda F453 router’s software lies in the fact that the operation’s output goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failur...

The vulnerability of the action_set_systemSettings() function in the SettingHandler component of the GPON-terminal software Tenda G103 allows a intruder to execute arbitrary commands.

The vulnerability of the actionsetsystemSettings function in the SettingHandler component of the GPON-terminal software framework Tenda G103 is related to the lack of measures to sanitize input data during the processing of the lanIp parameter. Exploiting this vulnerability could allow a remote...

The vulnerability of the fromSafeClientFilter() function in the Tenda F453 router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the fromSafeClientFilter function in the Tenda F453 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the `metaalert_minutes` component in the `backend/open_webui/models/calendar.py` file of the Open WebUI AI-based web interface allows a attacker to compromise the accessibility of protected information.

The vulnerability of the metaalertminutes component in the backend/openwebui/models/calendar.py file of the Open WebUI AI-based web interface is related to incorrect validation of the specified data type. Exploiting this vulnerability could allow an attacker to compromise the accessibility of...

The vulnerability of the formWrlsafeset() function in the Tenda F456 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formWrlsafeset function in the Tenda F456 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

The vulnerability of the match_hostname() function in the Rsync file transfer and synchronization utility allows a attacker to bypass existing security mechanisms.

The vulnerability of the matchhostname function in the Rsync file transfer and synchronization utility is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to bypass existing security mechanisms remotely...

The vulnerability of the formWifiMacFilterGet() function in the Tenda W3 wireless access point software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formWifiMacFilterGet function in the Tenda W3 wireless access point software is related to the operation that goes beyond the buffer in memory when processing the wlradio parameter. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of Twig CMS’ security policy, October CMS, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Twig CMS’ security system, October CMS, is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the FormWriteFacMac() function in the Tenda F453 router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the FormWriteFacMac function in the Tenda F453 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Rsync file transfer and synchronization utility lies in the improper handling of symbolic links before accessing files. This allows attackers to circumvent existing security restrictions.

The vulnerability of the Rsync file transfer and synchronization utility is related to the incorrect handling of symbolic links before accessing files. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions remotely...

The vulnerability of the Tenda W308R router’s microprogramming software, related to deficiencies in cookie file processing, allows attackers to carry out spoofing attacks.

The vulnerability of the Tenda W308R router’s microprogramming software is related to deficiencies in cookie file handling. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks by sending specially crafted GET requests to the goform/AdvSetDns endpoint...

The vulnerability of the REST API web interface component based on artificial intelligence allows a perpetrator to trigger a service failure.

The vulnerability of the REST API web interface based on artificial intelligence involves executing a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the ColdFusion software platform, related to deficiencies in access control, allows attackers to read arbitrary files.

The vulnerability of the ColdFusion software platform is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to read arbitrary files remotely...

The vulnerability of the ColdFusion software platform, related to the failure to eliminate instructions in dynamically executed code, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform lies in the lack of measures taken to neutralize instructions in dynamically executed code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Kerberos Key Distribution Center (KDC) component of Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Kerberos Key Distribution Center KDC component in Windows operating systems is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the Graphics component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Graphics component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the `extractTarDirectory` and `ensureLinkPath` functions in the `content/file.Store` component of the oras-go programming language library allows a malicious actor to gain unauthorized access to create and re-write files.

The vulnerability of the extractTarDirectory and ensureLinkPath functions in the content/file.Store component of the oras-go library is related to an incorrect restriction on the path to the directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to create and...

The vulnerability of the ColdFusion software platform, related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Microsoft Authentication Library (MSAL), related to the possibility of bypassing the authentication process, allows attackers to perform spear-phishing attacks.

The vulnerability of the Microsoft Authentication Library MSAL relates to the possibility of bypassing the authentication process. Exploiting this vulnerability could allow a malicious actor to perform spear-phishing attacks remotely...

The vulnerability of the R7WebsSecurityHandler() function in the Tenda i6 Wi-Fi router software allows a hacker to bypass the catalog.

The vulnerability of function R7WebsSecurityHandler in the Tenda i6 Wi-Fi router software is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a remote attacker to bypass the directory structure...

The vulnerability of the client for remote desktop clients on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Remote Desktop Client for Windows operating systems in dealing with client remote desktops is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the AMQConnection.java file in the RabbitMQ rabbitmq-java-client Java client allows a attacker to cause a service failure.

The vulnerability of the AMQConnection.java file in the RabbitMQ rabbitmq-java-client Java client lies in its reliance on unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the echappe_anti_xss() function in the SPIP content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the echappeantixss function in the SPIP content management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site scripting attacks...

The vulnerability of the SPIP content management system, related to insufficient validation of requests on the server side, allows a hacker to execute an SSRF attack.

The vulnerability of the SPIP content management system is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

The vulnerability of the fromRouteStatic function (/goform/RouteStatic) in the Tenda CX12L Wi-Fi router software allows a hacker to trigger a service failure.

The vulnerability of the fromRouteStatic function /goform/RouteStatic in the Tenda CX12L Wi-Fi router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to trigger a service failure by sending a specially crafted POST request...

The vulnerability of the Adobe Photoshop graphic editor, related to integer overflow, allows an attacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the formWrlExtraSet function (/goform/WrlExtraSet) of the Tenda CH22 router software allows a attacker to execute arbitrary code or cause service interruptions.

The vulnerability of the formWrlExtraSet /goform/WrlExtraSet function in the Tenda CH22 router microprogramming system lies in the reading of data outside the buffer in memory during the processing of the GO parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or...

The vulnerability of the Parameter Handler component in the fromSetCfm function of the /goform/setcfm microprogramming system Tenda CH22, which allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Parameter Handler component in the fromSetCfm function of the /goform/setcfm microprogramming system Tenda CH22 is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the fromwebExcptypemanFilter() function (/goform/webExcptypemanFilter) in the httpd component of the Tenda F451 router microprogramming system, which allows a hacker to cause a service failure.

The vulnerability of the fromwebExcptypemanFilter function /goform/webExcptypemanFilter in the httpd component of the Tenda F451 router microprogramming system is related to the issue of the operation going beyond the buffer in memory when processing the page parameter. Exploiting this...

The vulnerability of the formUploadConfig() function in the Tenda HG3 router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formUploadConfig function in the Tenda HG3 router’s microprogramming software stems from the issue where the operation exceeds the buffer boundaries in memory when processing the destNet parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrar...

The vulnerability of the gstruleQos function (goform/guestWifiRuleRefresh) in the Tenda W20E router software allows a intruder to execute arbitrary commands.

The vulnerability of the gstruleQos function goform/guestWifiRuleRefresh in the Tenda W20E router microprogramming software is related to the execution of operations outside the buffer in the gstup and gstdwn parameters’ memory. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the formCreateFileName() function in the Tenda CH22 router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability of the formCreateFileName function in the Tenda CH22 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the form_fast_setting_wifi_set() function (/goform/fast_setting_wifi_set) in the Tenda A18 router microprogramming software allows a hacker to trigger a service failure.

The vulnerability of the formfastsettingwifiset function /goform/fastsettingwifiset in the Tenda A18 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to trigger a service failure by sending a specially crafted POST...

The vulnerability of the Adobe Photoshop graphic editor lies in its uncontrolled search path, which allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a hacker to execute arbitrary code...

The vulnerability in the web interface for managing Tenda AC7 router micro-programming software allows a hacker to inject any HTML or JavaScript code they desire.

The vulnerability in the web interface for managing Tenda AC7 router micro-programming software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML or JavaScript code remotely...

The vulnerabilities in the backend files open_webui/routers/auths.py, backend/open_webui/utils/oauth.py, and backend/open_webui/socket/main.py of the Open WebUI artificial intelligence-based web interface allow a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability in the web interface based on artificial intelligence, namely backend/openwebui/routers/auths.py, backend/openwebui/utils/oauth.py, and backend/openwebui/socket/main.py, is related to incorrect session expiration times. Exploiting this vulnerability could allow a malicious actor...

The vulnerability of the amqp_login_inner() function in the RabbitMQ message broker library, librabbitmq/amqp_socket.c, allows a attacker to cause a service failure.

The vulnerability of the amqplogininner function in the RabbitMQ message broker’s librabbitmq/amqpsocket.c file is related to buffer overflows in the dynamic memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the decoder in open-source libraries for working with protobuf and GRPC Wire allows attackers to induce a service failure.

The vulnerability of the decoder in open-source libraries for working with protobuf and GRPC Wire is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

The vulnerability of the fromRouteStatic() function (/goform/RouteStatic) in the Tenda F456 router software allows a hacker to execute arbitrary code.

The vulnerability of the fromRouteStatic function /goform/RouteStatic of the Tenda F456 router software lies in the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code by...

The vulnerability of the sub_423B50() function (/goform/setMacFilterCfg) of the MAC Filtering Configuration Endpoint component in the Tenda A18 router microprogramming software allows a intruder to cause a service failure.

The vulnerability of the sub423B50 function /goform/setMacFilterCfg of the MAC Filtering Configuration Endpoint component in the Tenda A18 microprogramming router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure ...

The vulnerability of the mp_Enddisc() function in the operating system kernels of FreeBSD allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the mpEnddisc function in the kernel of FreeBSD lies in the overflow of a buffer in dynamic memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

The vulnerability of the fromAddressNat function (/goform/addressNat) in Tenda CX12L Wi-Fi router software allows a intruder to trigger a service failure.

The vulnerability of the fromAddressNat function /goform/addressNat in Tenda CX12L Wi-Fi routers is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to trigger a service failure by sending a specially crafted POST request...

The vulnerability of the Rsync file transfer and synchronization utility lies in the improper handling of symbolic links before accessing files. This allows attackers to exploit their privileges.

The vulnerability of the Rsync file transfer and synchronization utility is related to the incorrect handling of symbolic links before accessing files. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the fromaddressNat() function (/goform/addressNat) in the Tenda F456 router’s microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the fromaddressNat function /goform/addressNat in the Tenda F456 router’s microprogramming system is related to the copying of buffers without checking the size of the input data when processing the manufacturer parameter. Exploiting this vulnerability allows an attacker to...

The vulnerability of the WrlclientSet() function (/goform/WrlclientSet) of the Tenda FH451 router’s software allows a hacker to execute arbitrary code.

The vulnerability of the WrlclientSet function /goform/WrlclientSet of the Tenda FH451 router microprogramming system is related to buffer overflow in the stack when processing the GO parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the Skype for Business Server’s instant messaging program, related to the possibility of using client-side authentication, allows attackers to carry out spoofing attacks.

The vulnerability of the Skype for Business Server’s instant messaging program relates to the possibility of using client-side authentication. Exploiting this vulnerability could allow attackers to carry out spoofing attacks remotely...

The vulnerability of the fromSetSysTime(/goform/SetSysTimeCfg) function in the Tenda AC7 router’s software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromSetSysTime/goform/SetSysTimeCfg function in the Tenda AC7 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service...

The vulnerability of the Adobe Photoshop graphic editor, related to integer overflow, allows an attacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to execute arbitrary code...