196962 matches found
Microsoft Office PowerPoint buffer error vulnerability
Microsoft Office PowerPoint has a buffer error vulnerability, which stems from excessive buffer reading in Microsoft Office PowerPoint. This vulnerability may allow unauthorized attackers to leak information through the network...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute arbitrary code through the network...
Microsoft Office PowerPoint buffer error vulnerability
Microsoft Office PowerPoint has a buffer error vulnerability. This vulnerability stems from an out-of-bounds read in Microsoft Office PowerPoint, which may allow unauthorized attackers to disclose information through the network...
Microsoft Office Outlook buffer error vulnerability
Microsoft Office Outlook has a buffer error vulnerability, which stems from a heap buffer overflow. This vulnerability could allow unauthorized attackers to execute code via the network...
Google Chrome Resource Management Error Vulnerability
Versions of Google Chrome prior to 155.0.8059.84 have a resource management vulnerability. This vulnerability stems from the use of reusing V8 objects after they are released, which may allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...
Microsoft Office PowerPoint buffer error vulnerability
Microsoft Office PowerPoint has a buffer error vulnerability. This vulnerability stems from the possibility of out-of-bounds reading in Microsoft Office PowerPoint, which could allow unauthorized attackers to leak information through the network...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...
MsgByte Tianji SQL Injection Vulnerability
Versions of MsgByte Tianji before 1.31.29 have a SQL injection vulnerability. This vulnerability stems from the getDateQuery function in src/server/utils/prisma.ts, which interpolates the timezone request value using Prisma.sql. Without parameter binding, attackers can inject SQL statements throu...
Eclipse Jetty information leakage vulnerability
Eclipse Jetty 12.1.12 and earlier versions of 12.1.x, 12.0.38 and earlier versions of 12.0.x, 11.0.32 and earlier versions of 11.0.x, 10.0.32 and earlier versions of 10.0.x, and 9.4.64 and earlier versions of 9.4.x have a vulnerability involving information leakage. This vulnerability arises from...
COOL cool-admin-midway Authorization Issue Vulnerability
COOL cool-admin-midway versions 8.0.0 and earlier have an authorization issue vulnerability. This vulnerability stems from improper permission verification. An attacker with the 'sys:user:' permission can call the '/admin/sys/user/info', '/update', or '/delete' interfaces. By providing arbitrary...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...
WordPress Booking and Rental Manager has a vulnerability in input validation.
WordPress Booking and Rental Manager 2.8.0 and earlier versions have a vulnerability related to input validation errors. This vulnerability stems from improper validation of the specified number in the input, which may lead to the removal of important client functions...
WordPress Flexible Quantity Authorization Issue Vulnerability
WordPress versions 2.3.23 and earlier have a vulnerability related to authorization. This vulnerability stems from the lack of proper authorization, which may allow attackers to exploit improperly configured access control levels...
ValueCell.ai: Server-side request forgeing vulnerability
ValueCell.ai’s versions prior to 0.1.20 have a server-side request forgeing vulnerability. This vulnerability stems from unauthenticated server-side requests. Attackers can exploit this vulnerability by setting an unvalidated baseurl through the provider configuration endpoint. This allows them t...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a security vulnerability caused by a numerical truncation error in Microsoft Office Word. This vulnerability may allow unauthorized attackers to execute code through the network...
WordPress FluentCRM has vulnerabilities related to permission levels and access control mechanisms.
WordPress FluentCRM versions 3.2.5 and earlier have vulnerabilities related to permission granting and access control. These vulnerabilities stem from improper permission allocation, which may lead to unauthorized privilege escalation...
Kitae Park Mang Board Cross-site Scripting Vulnerability
Kitae Park Mang Board 2.4.0 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from insufficient cleaning of the 'datatype' parameter input and inadequate escaping of output, allowing for storage-type cross-site scripting attacks. Unauthenticated attackers ca...
SELMF Unarr Buffer Error Vulnerability
SELMF versions 1.1.1 and earlier have a buffer error vulnerability. This vulnerability stems from an improper check of the length of ZIP64 extended fields in the zipparseextrafields function found in the zip/parse-zip.c file. It involves heap-based out-of-bounds read attacks, allowing attackers t...
Microsoft Office Word resource management error vulnerability
Microsoft Office Word has a resource management vulnerability. This vulnerability stems from the reuse of resources after release, which may allow unauthorized attackers to execute code through the network...
Cole Medin Archon Authorization Issue Vulnerability
Cole Medin Archon versions 0.2.13 to 0.11.1 have an authorization issue vulnerability. This vulnerability stems from the lack of authentication. Unauthenticated attackers can access the control APIs bound to 0.0.0.0/api/, potentially allowing them to execute commands on the host as an Archon user...
Classroomio authorization issue vulnerability
Classroomio versions 1.0.0 and earlier have an authorization issue vulnerability. This vulnerability stems from insecure direct object references in the Hono API course submission routing. Attackers can send their course ID along with the submission UUID of other courses as a request to the PUT o...
CRMEB crmeb_java authorization issue vulnerability
CRMEB crmebjava 3.1 and earlier versions have an authorization issue vulnerability. This vulnerability stems from an authorization bypass. Attackers can obtain order information from other members by requesting APIs like/api/front/order/express/orderId or/api/front/order/apply/refund/orderId. Thi...
Classroomio authorization issue vulnerability
Classroomio versions 1.0.0 and earlier have an authorization issue vulnerability. This vulnerability stems from improper authorization in PUT and DELETE requests for the /:lessonId route. Any course member including students can modify the title and stored HTML content of any course, or delete...
Microsoft Office Word numerical error vulnerability
Microsoft Office Word has a numerical error vulnerability, which stems from the rounding error in Microsoft Office Word. This vulnerability could allow unauthorized attackers to execute code via the network...
Microsoft Office buffer error vulnerability
Microsoft Office has a buffer overflow vulnerability that stems from a heap buffer overflow, which may allow unauthorized attackers to execute code via the network...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...
DaKheera47 JobOps server-side request forgeing vulnerability
DaKheera47 JobOps 0.13.1 and earlier versions have a server-side request forgeing vulnerability. This vulnerability stems from the POST /api/manual-jobs/fetch handler, which allows for server-side request forgeing. Attackers can provide loopback, private, or cloud metadata addresses in the URL...
WordPress Strong Testimonials: Authorization Issue Vulnerability
WordPress versions 3.3.12 and earlier have a vulnerability related to authorization. This vulnerability stems from the lack of proper authorization, which may allow attackers to exploit incorrectly configured access control levels...
QuadLayers Checkout Field Manager (Checkout Manager) for WooCommerce: Authorization issue vulnerability
The Checkout Field Manager Checkout Manager in WooCommerce 7.9.6 and earlier versions has an authorization issue vulnerability. This vulnerability arises from the plugin’s failure to properly verify whether the user has the necessary permissions to perform certain operations. As a result,...
SUSE Rancher Authorization Issue Vulnerability
SUSE Rancher versions prior to 2.8.0, 2.10.0, 2.10.5, and 2.11.0/2.11.1 have an authorization issue. This issue arises because the namespace used by local clusters for storing related resources PRTBs and secrets is the project name itself. Users with permission to create projects can create...
Mindoc-org MinDoc licensing issues vulnerability
MinDoc 2.2-beta.2 and earlier versions have an authorization issue vulnerability. This vulnerability stems from insecure direct object references in the DocumentController.Content component. Certified attackers with non-observers roles can read Markdown and HTML documents in private books by...
SUSE Linux Enterprise Server Trust Management Vulnerability
SUSE Linux Enterprise Server 16.1, SUSE Linux Enterprise Server for NVIDIA 16.1, and openSUSE Leap 16.1 have a trust management issue. This issue arises from two calls to qrencode when displaying QR codes via sdbootutil, which allows private data $pin/$key to be leaked through /proc. Any user wit...
Samuele Giampieri RedAmon Server Request Forgery Vulnerability
Samuele Giampieri’s RedAmon 7.0.1 and earlier versions contain a server-side request forgeing vulnerability. This vulnerability stems from the validateurl function in the agent endpoint POST /tradecraft/verify, which only checks the initial hostname and does not verify the address after redirecti...
Chris Trudesk Authorization Issue Vulnerability
Chris Trudesk versions 1.2.11 and earlier have an authorization vulnerability. This vulnerability stems from an authorization bypass issue. The GET /api/v1/messages/conversation/:id endpoint lacks participant verification, allowing any authenticated user to access private conversations by providi...
Microsoft ASP.NET Core resource management vulnerability
Microsoft ASP.NET Core has a resource management vulnerability. This vulnerability arises from insufficient or ineffective restrictions on ASP.NET Core resources, which may allow unauthenticated attackers to launch denial-of-service attacks via the network...
Google Chrome Resource Management Error Vulnerability
Versions of Google Chrome prior to 155.0.8059.84 contain a resource management vulnerability. This vulnerability stems from the use of reusing Prerender objects after they are released, which may allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML pa...
Google Chrome Resource Management Error Vulnerability
Versions of Google Chrome prior to 155.0.8059.84 have a resource management vulnerability. This vulnerability stems from a problem in the V8 engine where objects are reclaimed and then reused. This could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted...
Google Chrome buffer error vulnerability
Versions of Google Chrome prior to 155.0.8059.84 have a buffer overflow vulnerability, which stems from SVG memory corruption. This vulnerability could allow remote attackers to read memory through specially crafted HTML pages...
Google Chrome Resource Management Error Vulnerability
Versions of Google Chrome prior to 155.0.8059.84 have a resource management vulnerability. This vulnerability stems from the use of compositing, which allows for reusing resources after they are released. This could allow remote attackers to execute arbitrary code within a sandbox through a...
Google Chrome buffer error vulnerability
Versions of Google Chrome prior to 155.0.8059.84 contain a buffer overflow vulnerability. This vulnerability stems from DOM memory corruption, and it could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...
Google Chrome buffer error vulnerability
Versions of Google Chrome prior to 155.0.8059.84 have a buffer overflow vulnerability. This vulnerability stems from memory corruption in the V8 engine, which could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...
Google Chrome: Input validation error vulnerability
Versions of Google Chrome prior to 155.0.8059.84 contain a vulnerability related to input validation. This vulnerability arises from improper input validation, and it could allow remote attackers to execute arbitrary code outside of the sandbox through a specially crafted HTML page...
Google Chrome buffer error vulnerability
Versions of Google Chrome prior to 155.0.8059.84 have a buffer overflow vulnerability. This vulnerability stems from memory corruption in Workers, which could allow remote attackers to execute arbitrary code within the sandbox through a specially crafted HTML page...
Google Chrome buffer error vulnerability
Versions of Google Chrome prior to 155.0.8059.84 contain a buffer overflow vulnerability caused by core memory corruption. This vulnerability could allow remote attackers to read memory through specially crafted HTML pages...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a security vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer error vulnerability. This vulnerability stems from an out-of-bounds read in the Microsoft Office Word component, which could allow unauthorized attackers to leak information through the network...
Microsoft Office Word input validation error vulnerability
Microsoft Office Word has a vulnerability related to input validation. This vulnerability stems from relying on untrusted inputs in security decisions, which may allow unauthorized attackers to bypass security features locally...