196525 matches found
F5 NGINX Plus and F5 NGINX Open Source have buffer error vulnerabilities
F5 NGINX Plus and F5 NGINX Open Source are both products of F5 Corporation, U.S.A. F5 NGINX Plus is a software-based application delivery platform.F5 NGINX Open Source is a high-performance web server, reverse proxy server, load balancer, and API gateway. A buffer error vulnerability exists in F5...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a queue update issue in octeontx2-pf, which could result in a system warning...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from mt7996thermalinit not checking the devmkasprintf return value, which could result in a null pointer...
Brother Industries’ multiple driver installer for Windows security vulnerabilities
Brother Industries Multiple driver installers for Windows is a driver software from Brother Industries, Japan. A security vulnerability exists in Brother Industries Multiple driver installers for Windows, which can be exploited by an unauthenticated attacker to access the /etc/mntinfo.csv path vi...
Allure Report: Code-related vulnerabilities
Allure Report is a flexible, lightweight, multi-language test reporting tool from the Allure Framework open source. A code issue vulnerability exists in Allure Report 2 versions prior to 2.34.1, which stems from xunit-xml-plugin not securely configuring the XML parser, which could lead to XXE...
IBM Cognos Analytics cross-site scripting vulnerabilities
IBM Cognos Analytics is a suite of business intelligence software from International Business Machines IBM. The software includes reports, dashboards, and scorecards, and can assist organizations in adjusting their decisions by analyzing such things as key factors and key people. A cross-site...
MetaCPAN Perl Mojolicious::Plugin::CSRF security vulnerability
MetaCPAN Perl Mojolicious::Plugin::CSRF is a CSRF defense plugin from the MetaCPAN Foundation. A security vulnerability exists in MetaCPAN Perl Mojolicious::Plugin::CSRF version 1.03 that stems from the use of a weak random number source to generate CSRF tokens...
Microhard BulletLTE‑NA2 and Microhard IPn4Gii-NA2 have parameter injection vulnerabilities
The Microhard BulletLTE-NA2 and Microhard IPn4Gii-NA2 are both gateway devices from Microhard Canada. A parameter injection vulnerability exists in the Microhard BulletLTE-NA2 and Microhard IPn4Gii-NA2, which stems from the presence of post-authentication command injection on the AT+MNNETSP...
Google Chrome security vulnerabilities
Google Chrome is a WEB browser developed by Google Inc. Google Chrome suffers from an information disclosure vulnerability, no details of the vulnerability are provided at this time...
Fuji Electric V-SFT buffer error vulnerability
Fuji Electric V-SFT is a screen configuration software from Fuji Electric Japan. Fuji Electric V-SFT suffers from a buffer overflow vulnerability that originates in the settemptypedefault function in VS6MemInIF, which can be exploited by an attacker to cause a crash, information disclosure, and...
Several Samsung products have security vulnerabilities
SAMSUNG Exynos 9820 and others are products of the South Korean company Samsung SAMSUNG.SAMSUNG Exynos 9820 is a processor for mobile devices.SAMSUNG Exynos 980 is a first 5G integrated Soc product and the world's first A77 architecture processor.SAMSUNG Exynos 9825 is a mobile processor. A...
Microsoft Scripting Engine security vulnerabilities
Microsoft Scripting Engine is a tool from Microsoft USA that provides a scripting engine for JScript and VBScript. A security vulnerability exists in Microsoft Scripting Engine. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are affected...
TOTOLINK A3002R security vulnerabilities
TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3002R suffers from a buffer overflow vulnerability that originates from the failure of the routername parameter in the formDnsv6 interface to correctly validate the length and size of the input data, which...
Retrieval-based-Voice-Conversion-WebUI security vulnerability
Retrieval-based-Voice-Conversion-WebUI is an open source voice training modeling tool from RVC-Project. A security vulnerability exists in Retrieval-based-Voice-Conversion-WebUI version 2.2.231006 and earlier, which stems from command injection...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the ipcpciereadbioscfg function in the wwan driver not freeing the acpiobject, which could lead to a memory...
goTenna V1 security vulnerabilities
goTenna V1 is a portable offline communication device from goTenna that enables long-distance peer-to-peer communication between smartphones via mesh network technology. A security vulnerability exists in goTenna V1, which stems from the default use of a phone number as the GID, which may lead to...
WordPress plugin GTDB Guitar Tuners has a cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
LRQA Nettitude PoshC2 security vulnerabilities
LRQA Nettitude PoshC2 is an agent-aware C2 framework from LRQA used to help penetration testers with red teaming, late exploits, and lateral movement. A security vulnerability exists in LRQA Nettitude PoshC2 that stems from allowing an unauthenticated attacker to connect to the C2 server and...
Fortinet’s various products have security vulnerabilities
Fortinet FortiOS and others are products of Fortinet, Inc. Fortinet FortiOS is a dedicated security operating system on the FortiGate network security platform.Fortinet FortiWeb is a Web application layer firewall.Fortinet Fortinet FortiManager is a centralized network security management platfor...
WordPress plugin Team Rosters cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
WinRAR security vulnerabilities
WinRAR is a file compressor from WinRAR. The product supports compression and decompression of files in RAR, ZIP, and other formats, among others. A security vulnerability exists in WinRAR versions prior to 7.11 that stems from a symbolic link bypassing the security warning feature, which could...
WordPress plugin MyBookProgress by Stormhill Media has security vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
FoxCMS code injection vulnerability
FoxCMS is a free commercial open source content management system from China Qianxu FoxCMS company. A security vulnerability exists in FoxCMS version 1.2.5, which originates from the index.html component that allows execution of arbitrary code...
LoLLMs security vulnerabilities
LoLLMs is a large language and multimodal system by the individual developer Saifeddine ALOUI. A security vulnerability exists in LoLLMs version V14, which stems from the lack of a checkaccess function, which allows an attacker to add, modify and delete bindings at will...
WordPress plugin WP-PManager has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
Keylime code issue vulnerabilities
Keylime is an open source extensible trust system utilizing TPM technology from Keylime Open Source. A code issue vulnerability exists in Keylime version 7.12.0 that stems from strict type checking and could lead to proxy registration failure...
Kubernetes security vulnerabilities
Kubernetes K8s is an open source system for automating the deployment, scaling, and management of containerized applications from the Kubernetes open source. A security vulnerability exists in Kubernetes that stems from the use of the deprecated in-tree gitRepo volume feature, which could lead to...
Adobe Acrobat Reader buffer error vulnerability
Adobe Acrobat is the United States of America Odo than Adobe company's set of software suite used to create, edit, view and print PDF Portable Document Format files. A security vulnerability exists in Adobe Acrobat, which stems from an out-of-bounds read issue that can be exploited by an attacker...
Adobe Illustrator buffer error vulnerability
Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Illustrator, which can be exploited by attackers to obtain sensitive information...
Loggrove security vulnerabilities
Loggrove is a web platform service by olajowon individual developer. A security vulnerability exists in Loggrove version v.1.0, which originates from sensitive information that can be accessed via the read.py component...
Lenovo Vantage security vulnerabilities
Lenovo Vantage is a computer management application from the Chinese company Lenovo Lenovo. The program supports features such as driver updates, device status diagnostics, and computer configuration. A security vulnerability exists in Lenovo Vantage, which stems from improper BIOS customization...
WordPress plugin Barcode Generator for WooCommerce has security vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
Hanwha Vision NVR security vulnerability
Hanwha Vision NVR is a series of network video recorder devices from Hanwha Vision, a South Korean company. A security vulnerability exists in Hanwha Vision NVR that stems from a URL input parameter in which malformed data can be injected to reboot the NVR, leading to remote code execution...
Hanwha Vision NVR security vulnerability
Hanwha Vision NVR is a series of network video recorder devices from Hanwha Vision, a South Korean company. A security vulnerability exists in Hanwha Vision NVR that stems from improper handling of large data inputs when processing URL parameters, which could lead to a stack overflow...
WordPress plugin WPLMS code issue vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A code issue...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a problem with the pairing alignment method that affects Bluetooth pairing functionality...
IBM InfoSphere Information Server and IBM InfoSphere DataStage Flow Designer security vulnerabilities
IBM InfoSphere Information Server and IBM InfoSphere DataStage Flow Designer are both products of International Business Machines IBM.IBM InfoSphere Information Server is a data integration platform. The platform can be used to integrate data information obtained from various sources.IBM InfoSphe...
Async Http Client Authorization Vulnerability
Async Http Client is AsyncHttpClient open source asynchronous Http and WebSocket client library for Java. An authorization issue vulnerability exists in Async Http Client version 3.0.0, which stems from an automatically enabled and self-managed CookieStore handling mechanism that can lead to...
IrfanView security vulnerabilities
IrfanView is an image viewer by the individual developer Irfan Skiljan. It supports image browsing, image editing, image format conversion and more. IrfanView suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute code in the context of the current proce...
Querydsl security vulnerabilities
Querydsl is a framework from the Querydsl open source that supports building type-safe SQL-like queries for multiple backends. A security vulnerability exists in Querydsl version 5.1.0 that stems from allowing SQL or HQL injection in orderBy in JPAQuery...
AnyDesk security vulnerabilities
AnyDesk is a remote desktop connection software from AnyDesk Germany. A security vulnerability exists in AnyDesk 8.1.0 and earlier versions, which stems from the ability to inadvertently expose public IP addresses in network traffic...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure of the sja1105setupdevlinkregions function to properly handle memory leaks in dsa devices, where...
Google Chrome security vulnerabilities
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions prior to Google Chrome 130.0.6723.58, which can be exploited by remote attackers to execute arbitrary code via a crafted HTML page...
Rockwell Automation’s various products have security vulnerabilities
Rockwell Automation RSLogix 500 and others are products of Rockwell Automation, a U.S. company.Rockwell Automation RSLogix 500 is a suite of programming software for industrial control systems.Rockwell Automation Rockwell Automation RSLogix Micro Developer and Starter is an industrial control...
MediaTek chip security vulnerabilities
The MediaTek chips are a variety of MediaTek chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips due to a lack of boundary checking in the power module, which may allow out-of-bounds writes...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not ensuring that the number of loops does not exceed the length of an array...
PHPGurukul Dairy Farm Shop Management System security vulnerabilities
Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . The Dairy Farm Shop Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the pname parameter of the...
Several ZTE products have security vulnerabilities
ZTE ZXHN H168N and others are products of ZTE Corporation ZTE, China.ZTE ZXHN H168N is a router.ZTE ZXHN E500 is a wireless router.ZTE ZXHN H168A is a wireless router. A security vulnerability exists in various ZTE products, which stems from a local file inclusion vulnerability that can be...
Tenda AX1806 security vulnerabilities
The Tenda AX1806 is a WiFi6 wireless router from Tenda, a Chinese company. The Tenda AX1806 suffers from a buffer overflow vulnerability that stems from the iptv.city.vlan parameter in formGetIptv containing a stack overflow. No detailed vulnerability details are provided at this time...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the lack of exception protection handling for vd in the axichanhandleerr function...