197809 matches found
Qualcomm Chipsets security vulnerabilities
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets, which stems from an out-of-bounds read vulnerability contained in the WLAN Host module...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the virtio-pci module in the vpdelvqs function, where vpdev-isavq may be null, which may cause problems...
NATS Server Security Vulnerability
NATS Server is an open source messaging system. The system is primarily used for cloud-native applications, IoT messaging, and microservices architectures. NATS.io A security vulnerability exists in NATS Server versions prior to 2.8.2 and Streaming Server versions prior to 0.24.6, which stems fro...
IBM i Security Vulnerabilities
IBM i is a suite of operating systems from International Business Machines IBM running in IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i versions 7.3, 7.4, and 7.5. An attacker exploiting this vulnerability could elevate privileges to gain root access to the host...
WordPress plugin WP Docs cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site...
Monstra CMS Security Vulnerability
Monstra CMS is a lightweight PHP-based content management system CMS by Sergey Romanenko, an individual developer in Ukraine. A security vulnerability exists in Monstra CMS version v3.0.4. An attacker can exploit the vulnerability to execute arbitrary code by uploading specially crafted PHP files...
Number withdrawal
wandb is a tool for visualizing and tracking machine learning experiments. This CVE number has been withdrawn...
D-Link DAP-1325 security vulnerability
D-Link DAP-1325 is a wireless network extender made by D-Link, which is mainly used to extend the wireless network coverage, support the conversion of wired network and wireless network or connect to different wireless networks. The D-Link DAP-1325 suffers from a command injection remote code...
Znuny and Znuny LTS security vulnerabilities
Znuny is a work order system from Znuny, Inc. A security vulnerability exists in Znuny and Znuny LTS that stems from the presence of a path traversal vulnerability. An attacker could exploit the vulnerability to upload a file to an arbitrary writable location. Affected products and versions: Znun...
Red Hat Keycloak path traversal vulnerability
Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. A path traversal vulnerability exists in Red Hat Keycloak that stems from an inability to properly validate the inclusion of a URL in a redirec...
Microsoft ODBC Driver security vulnerabilities
Microsoft ODBC Driver is a driver from Microsoft Corporation USA. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker could exploit the vulnerability to...
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS security vulnerabilities
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS are both products of Dell USA.Dell PowerEdge Server BIOS is a system update driver from Dell.Dell Precision Rack BIOS is the Dell Precision Rack BIOS is a BIOS utility for high performance workstation products. A security vulnerability exist...
Campcodes Online Marriage Registration System SQL Injection Vulnerability
Online Marriage Registration System is a website builder that supports online marriage registration. A SQL injection vulnerability exists in Campcodes Online Marriage Registration System version 1.0, which originates from a SQL injection vulnerability in the searchdata parameter of the...
Adobe Premiere Pro buffer error vulnerability
Adobe Premiere Pro is a set of non-linear editing video editing software from the American company Audobee Adobe. Adobe Premiere Pro suffers from an out-of-bounds write vulnerability vulnerability that can be exploited by an attacker to cause arbitrary code to be executed in the context of the...
Hazelcast Security Breach
Hazelcast Hazelcast IMDG is a set of scalable open source data distribution platform of the U.S. Hazelcast company . The platform supports a variety of distributed data structures, supports distributed caching and other features. Hazelcast has a security vulnerability that stems from the inabilit...
Brivo Access Control Systems Security Breach
Brivo Access Control Systems Brivo ACS is a family of access control systems from Brivo USA. Providing comprehensive visibility, data-driven insight, access control and open integration to improve secure operations. A security vulnerability exists in Brivo Access Control Systems versions 5.2.4...
Mitsubishi Electric MELSEC iQ-R series security vulnerabilities
The Mitsubishi Electric MELSEC iQ-R series is a programmable logic controller from Mitsubishi Electric Japan. The Mitsubishi Electric MELSEC iQ-R series suffers from an information disclosure vulnerability that can be exploited by an authenticated, remote attacker to log in to the product and...
Allegro Authorization Issues Vulnerability
Allegro is a cross-platform library open-sourced by Allegro primarily for video game and multimedia programming. A security vulnerability exists in Allegro AI ClearML that stems from a lack of authentication, which allows remote attackers to arbitrarily access, create, modify, and delete files...
WordPress Plugin ProfileGrid Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...
Fortinet FortiVoice Security Vulnerability
Fortinet FortiSwitch and others are products of Fortinet, Inc. FortiSwitch is a switch product and Fortinet FortiVoice is a product of tine and others are products of tine, Inc. tine is a team collaboration software. A security vulnerability exists in Fortinet FortiVoiceEnterprise, FortiSwitch,...
WordPress Plugin Templately Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
SAP Business One security vulnerabilities
SAP Business One is a set of enterprise management software from SAP. The software includes functions such as financial management, operations management and human resource management. An XML external entity injection vulnerability exists in SAP Business One version 10.0. The vulnerability stems...
LG Mobile Security Breach
LG mobile is a series of mobile device products from South Korea's Luckin LG. A security vulnerability exists in LG Mobile. An attacker can exploit the vulnerability to delete arbitrary files...
Jupyter Server Access Control Vulnerability
Jupyter Server is an application from the Jupyter organization used to provide back-end services for Jupyter Web applications. An access control error vulnerability exists in versions of Jupyter Server prior to 2.7.2 that stems from incorrect cross-site credential checking of URLs, which could le...
Jupyter Server input validation vulnerability
Jupyter Server is an application used by the Jupyter organization to provide back-end services for Jupyter Web applications. An input validation error vulnerability exists in versions of Jupyter Server prior to 2.7.2, which stems from the presence of an open redirection vulnerability that could...
Siemens’ various products have vulnerabilities related to resource management.
JT2Go is a 3D JT viewing tool that allows users to view JT, PDF, Solid Edge, PLM XML with available JT, VFZ, CGM, and TIF data.Solid Edge is a portfolio of software tools that address a variety of product development processes: 3D design, simulation, manufacturing, and design management.Teamcente...
Diebold Nixdorf Vynamic View Console Code Issue Vulnerability
The Diebold Nixdorf Vynamic View Console is a system from Diebold Nixdorf that allows remote changes to all PC-based devices via Intel Active Management Technology AMT BIOS management. A security vulnerability exists in Diebold Nixdorf Vynamic View Console v.5.3.1 and prior versions, which...
Ruijie Networks Product Code Injection Vulnerability
Ruijie Networks Product is a series of Ruijie wireless products from China-based Ruijie Networks. A security vulnerability exists in the Ruijie Networks Product that originates from an API privilege that allows a remote attacker to escalate via a POST request to /cgi-bin/luci/ and affects the...
DuxCMS code-related vulnerabilities
DuxCMS is an open source content management system. A security vulnerability exists in DuxCMS version 2.1, which stems from a file upload vulnerability that allows an attacker to execute arbitrary php code via duxcms/AdminUpload/upload...
TYPO3 cross-site scripting vulnerabilities
TYPO3 is a free and open source content management system framework CMS/CMF from TYPO3 Association in Switzerland. A cross-site scripting vulnerability exists in TYPO3 versions 4.0.2 and earlier, 4.1.0 through 4.6.5, and 5.0.0 through 5.0.1, which stems from the kesearch extension that allows...
Yandex Navigator security vulnerabilities
Yandex Navigator is a car navigation system from the Russian company Yandex for mobile devices running Android, iOS and Windows family of mobile operating systems. A security vulnerability exists in Yandex Navigator version v.6.60, which originates from an elevation of privilege that can be...
Google Chrome Resource Management Error Vulnerability
Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in versions prior to Google Chrome 113.0.5672.126, which stems from a mix-up in Navigation's instruction responsible for freeing memory. An attacker could use this vulnerability to...
Lost and Found Information System SQL Injection Vulnerability
Lost and Found Information System is a lost and found information system by oretnom23 Individual Developer. A SQL injection vulnerability exists in Lost and Found Information System version 1.0, which stems from an incorrect manipulation of the parameter id resulting in sql injection...
WordPress Plugin Simple Tooltips: Cross-site Script Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
File Tracker Manager System SQL Injection Vulnerability
File Tracker Manager System is a file tracker manager system. File Tracker Manager System v1.0 suffers from a SQL injection vulnerability, which originates from the lack of validation of the parameter newpassword in the file register/updatepassword.php against externally entered SQL statements. A...
Vyper buffer error vulnerability
Vyper is the Pythonic smart contract language for EVM. A buffer error vulnerability exists in Vyper versions prior to 0.3.8. An attacker exploited the vulnerability to cause an array access out-of-bounds...
SEMCMS code-related vulnerabilities
SEMCMS is a multilingual content management system CMS for foreign trade websites. A security vulnerability exists in SEMCMS v4.2, which is caused by an arbitrary file upload vulnerability in the component SEMCMSUpfile.php, which can be exploited by an attacker to execute arbitrary code by...
Acronis Cyber Backup and Acronis Cyber Protect security vulnerabilities
Acronis Cyber Backup and Acronis Cyber Protect are both products of Singapore Acronis Acronis.Acronis Cyber Backup is a data backup product. You can backup virtual machines and hosts, support for windows, linux backup, using AcronisInstantRestore to provide extremely fast recovery performance, an...
Linux Kernel Input Validation Vulnerability
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a lack of proper validation of user-supplied data, which could result in memory access beyond the end of an...
Apache Linkis code-related vulnerabilities
Apache Linkis is a library of the U.S. Apache Apache Foundation. Helps to easily connect various backend compute/storage engines. A code execution vulnerability exists in Apache Linkis 1.3.1 and earlier versions, which stems from a lack of valid filtered parameters, and can be exploited by an...
phpMyFAQ Cross-Site Script Vulnerabilities
phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in phpMyFAQ versions prior to 3.1.12. An attacker can exploit this vulnerability to perform cross-site scripting attacks...
NextCloud security vulnerabilities
Nextcloud is an open source suite of self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud iOS versions prior to 4.7.0, which stems from the ability to bypass the app password of an iOS app...
NextCloud path traversal vulnerability
Nextcloud is an open source suite of self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. Nextcloud suffers from a security vulnerability that stems from validating and normalizing strings in the wrong order, which can be exploited by an attacke...
WordPress plugin The Mongoose Page Plugin: Cross-site scripting vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
Apache Sling Cross-Site Scripting Vulnerabilities
Apache Sling is the United States Apache Apache Foundation of a Java platform for open source Web framework. It is designed to create content-centric applications on JSR-170 compliant content repositories such as Apache Jackrabbit. A cross-site scripting vulnerability exists in Sling App CMS...
LMeve SQL injection vulnerability
LMeve is the industry manager and contribution tracker for EVE Online. A SQL injection vulnerability exists in roxlukas LMeve versions prior to 0.1.59-beta, which stems from an issue with the function insertlog in the file wwwroot/ccpwgl/proxy.php, where manipulation of the parameter fetch can le...
Digital Arts m-FILTER security vulnerability
Digital Arts m-FILTER is an application from Digital Arts Japan. Designed to prevent data breaches, archive entire emails, block spam, and provide greater administrative control over email policies to allow safe and secure access to email. A security vulnerability exists in Digital Arts m-FILTER...
FlatPress cross-site scripting vulnerabilities
FlatPress is a Php-based blogging system from the FlatPress community that does not require database support. A cross-site scripting vulnerability exists in FlatPress, which stems from a problem with an unknown part of the admin/panels/entry/admin.entry.list.php file in the Admin Area component...
Alpine security vulnerabilities
Alpine is an email program. A security vulnerability exists in versions of Alpine prior to 1.10.4, which stems from a vulnerability that allows bypassing URL access filters...
OpenImageIO buffer error vulnerability
OpenImageIO is an image read and write library that also provides several tools and applications. A stack buffer overflow vulnerability exists in the TGA file format parser in OpenImageIO v2.3.19.0. An attacker could exploit this vulnerability to cause out-of-bounds writes and arbitrary code...