Google Chrome Resource Management Error Vulnerability

Google Chrome is a web browser developed by the American company Google. Google Chrome has a resource management vulnerability that stems from the reuse of resources after the Dawn process is terminated...

CodeAstro Leave Management System injection vulnerability

The CodeAstro Leave Management System is a leave management system developed by CodeAstro Inc. Version 1.0 of the CodeAstro Leave Management System has a SQL injection vulnerability. This vulnerability stems from the handling of the parameter “Name” in the file/admin/searchstafffordeletion.php,...

Bagisto path traversal vulnerability

Bagisto is an open-source e-commerce framework developed by Webkul Software in India. Bagisto has a path traversal vulnerability. This vulnerability stems from improper validation of user inputs in the ImageCacheController component. It allows unauthenticated remote attackers to send specially...

Tenda CX12L buffer error vulnerability

The Tenda CX12L is a home-use wireless router device from the Chinese company Tenda. The version 16.03.53.12 of the Tenda CX12L contains a buffer error vulnerability. This vulnerability stems from the function formfastsettingwifiset in the Wi-Fi Configuration Endpoint component...

Google Chrome Resource Management Error Vulnerability

Google Chrome is a web browser developed by the American company Google. Google Chrome has a resource management vulnerability that stems from the reuse of resources after Ozone is released...

Google Chrome Resource Management Error Vulnerability

Google Chrome is a web browser developed by the American company Google. Google Chrome has a resource management vulnerability that stems from the reuse of Codecs after their release...

Google Chrome competition condition issue vulnerability

Google Chrome is a web browser developed by the American company Google. Google Chrome has a vulnerability related to network conditions, known as a “network condition vulnerability.”...

Checkmk security vulnerabilities

Checkmk is an IT monitoring platform developed by Checkmk Corporation. Versions of Checkmk prior to 2.5.0p5 contained security vulnerabilities. These vulnerabilities stemmed from improper authorization in the user message dashboard widgets. As a result, the message retrieval endpoint would return...

Keycloak authorization issue vulnerabilities

Keycloak is an open-source identity and access management solution developed by Keycloak. There is a security vulnerability in Keycloak. This vulnerability stems from improper access control in the POST /admin/realms/realm/partialImport endpoint, which may allow limited administrators to bypass...

Itsourcecode Hospital Management System injection vulnerability

itsourcecode Hospital Management System is an open-source hospital management system developed by itsourcecode. Version 1.0 of itsourcecode Hospital Management System has a vulnerability related to parameter handling in the file/adminaccount.php, which may lead to SQL injection attacks. Attackers...

Itsourcecode Hospital Management System Cross-Site Scripting Vulnerability

itsourcecode Hospital Management System is an open-source hospital management system developed by itsourcecode. Version 1.0 of itsourcecode Hospital Management System has a cross-site scripting vulnerability. This vulnerability stems from the handling of the patientid parameter in the billing.php...

Google Chrome Access Control Vulnerability

Google Chrome is a web browser developed by the American company Google. Google Chrome has a access control vulnerability, which stems from improper implementation of plugins...

Google Chrome Resource Management Error Vulnerability

Google Chrome is a web browser developed by the American company Google. Google Chrome has a resource management vulnerability that stems from the reuse of resources after the Read Anything function is released...

Google Chrome: Input validation error vulnerability

Google Chrome is a web browser developed by Google Inc. of the United States. Google Chrome has a vulnerability related to input validation, which stems from insufficient validation of untrusted inputs by the New Tab Page...

Check Point Quantum Security Gateway Authorization Issue Vulnerability

Check Point Quantum Security Gateway is a series of enterprise-level security gateway devices developed by the Israeli company Check Point. The Check Point Quantum Security Gateway has an authorization issue vulnerability, which stems from a defect in the certificate verification logic process...

WordPress plugin Recipe Card Blocks Lite has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

CodeAstro Leave Management System injection vulnerability

The CodeAstro Leave Management System is a leave management system developed by CodeAstro Inc. Version 1.0 of the CodeAstro Leave Management System has a SQL injection vulnerability, which stems from the handling of the typeofleave parameter in the file/admin/addleave.php. Attackers can launch...

CodeAstro Leave Management System injection vulnerability

The CodeAstro Leave Management System is a leave management system developed by CodeAstro Inc. Version 1.0 of the CodeAstro Leave Management System has a SQL injection vulnerability. This vulnerability stems from the handling of the parameter “Name” in the file/admin/searchstaffforupdation.php,...

CodeAstro Leave Management System injection vulnerability

The CodeAstro Leave Management System is a vacation management system developed by CodeAstro Inc. Version 1.0 of the CodeAstro Leave Management System has a SQL injection vulnerability. This vulnerability stems from the handling of the leavetype parameter in the file /admin/deleteleavetype.php,...

NLnet Labs Routinator Path traversal vulnerability

NLnet Labs Routinator is an open-source RPKI routing origin validation service developed by NLnet Labs. NLnet Labs Routinator has a path traversal vulnerability, which stems from the improper checking of module components in the rsync URI. This vulnerability may allow for path traversal, enabling...

Gun security vulnerabilities

Gun is an open-source Erlang HTTP client developed by Nine Nines that supports HTTP/1.1, HTTP/2, and WebSocket. Versions of Gun from 2.0.0 to 2.4.0 contained security vulnerabilities. These vulnerabilities stemmed from unexpected status codes or return values in the gunhttp module, which could...

QloApps cross-site scripting vulnerabilities

QloApps is an open-source hotel management and reservation system developed by QloApps. Versions of QloApps 1.7.0 and earlier contained a cross-site scripting vulnerability. This vulnerability stemmed from a storage-based cross-site scripting vulnerability in the administrator’s file manager. It...

SourceCodester Inventory System Cross-site Scripting Vulnerabilities

The SourceCodester Inventory System is an open-source inventory system developed by SourceCodester. Version 1.0 of the SourceCodester Inventory System has a cross-site scripting vulnerability. This vulnerability stems from the handling of parameters fullname and username in the users.php componen...

Checkmk Cross-Site Script Vulnerability

Checkmk is an IT monitoring platform developed by Checkmk Corporation. Versions prior to Checkmk 2.5.0p5, 2.4.0p31, 2.3.0p48, and all 2.2.0 versions contain a cross-site scripting vulnerability. This vulnerability stems from the service discovery active check’s output, which contains a stored...

Google Chrome: Input validation error vulnerability

Google Chrome is a web browser developed by Google Inc. of the United States. Google Chrome has a vulnerability related to input validation, which stems from insufficient validation of unreliable inputs by the UI...

Google Chrome security vulnerabilities

Google Chrome is a web browser developed by the American company Google. Google Chrome has a security vulnerability that stems from the improper initialization of Video...

Google Chrome security vulnerabilities

Google Chrome is a web browser developed by the American company Google. There is a security vulnerability in Google Chrome, which stems from issues with the Passwords component...

Google Chrome Resource Management Error Vulnerability

Google Chrome is a web browser developed by Google Inc. of the United States. Google Chrome has a resource management vulnerability that stems from the reuse of resources after they are released by ServiceWorker...

Google Chrome Resource Management Error Vulnerability

Google Chrome is a web browser developed by the American company Google. Google Chrome has a resource management vulnerability that stems from the reuse of resources after a guest view is released...

Google Chrome security vulnerabilities

Google Chrome is a web browser developed by the American company Google. There is a security vulnerability in Google Chrome, which stems from insufficient implementation of network policies...

Tenda CX12L buffer error vulnerability

The Tenda CX12L is a home-use wireless router device from the Chinese company Tenda. The version 16.03.53.12 of the Tenda CX12L contains a buffer error vulnerability. This vulnerability stems from the setSchedWifi function in the Wi-Fi Schedule Configuration Endpoint component...

Google Chrome security vulnerabilities

Google Chrome is a web browser developed by the American company Google. Google Chrome has a security vulnerability, which stems from a liyuv integer overflow...

Google Chrome code injection vulnerability

Google Chrome is a web browser developed by Google Inc. of the United States. Google Chrome has a code injection vulnerability, which stems from issues with the lifecycle of SVG objects...

SourceCodester Inventory System Cross-site Scripting Vulnerabilities

The SourceCodester Inventory System is an open-source inventory system developed by SourceCodester. Version 1.0 of the SourceCodester Inventory System has a cross-site scripting vulnerability. This vulnerability stems from operations in the file header.php, which may lead to cross-site scripting...

UTT HiPER 2610G Buffer Error Vulnerability

UTT HiPER 2610G is a high-end router designed for small and medium-sized enterprise networks by UTT Corporation. Versions of UTT HiPER 2610G 3.0.0-171107 and earlier contain a buffer overflow vulnerability. This vulnerability stems from the strcopy function in the...

SourceCodester Inventory System security vulnerabilities

The SourceCodester Inventory System is an open-source inventory system developed by SourceCodester. Version 1.0 of the SourceCodester Inventory System contains a security vulnerability. This vulnerability stems from the operation of the ROLE parameter in the Account Creation Handler component...

UTT HiPER 2610G Buffer Error Vulnerability

UTT HiPER 2610G is a high-end router designed for small and medium-sized enterprise networks by UTT Corporation. Versions of UTT HiPER 2610G 3.0.0-171107 and earlier contain a buffer overflow vulnerability. This vulnerability stems from the strcpy function in the file/goform/formNatStaticMap, whi...

Google Chrome security vulnerabilities

Google Chrome is a web browser developed by the American company Google. Google Chrome has a security vulnerability, which stems from insufficient validation of untrusted input...

Google Chrome buffer error vulnerability

Google Chrome is a web browser developed by the American company Google. Google Chrome has a buffer overflow vulnerability, which stems from out-of-bounds writes...

Google Chrome Resource Management Error Vulnerability

Google Chrome is a web browser developed by the American company Google. Google Chrome has a resource management vulnerability that stems from the reusing of resources after they are released...

VMware Cloud Foundation Operations security vulnerabilities

VMware Cloud Foundation Operations is a private cloud operations management platform provided by the American company VMware. There is a security vulnerability in VMware Cloud Foundation Operations. This vulnerability stems from multiple storage-based cross-site scripting vulnerabilities, which...

Red Hat Enterprise Linux 10 has vulnerabilities related to improper exception handling.

Samba is an open-source suite of standard Windows interoperability programs for Linux and Unix systems. Samba has a code vulnerability that stems from the WINS protocol handler, which fails to properly validate incoming packets when operating as an Active Directory domain controller. This allows...

Google Chrome security vulnerabilities

Google Chrome is a web browser developed by the American company Google. Google Chrome has a security vulnerability, which stems from an integer overflow issue...

Tenda HG7 buffer error vulnerability

The Tenda HG7 is a dual-band Wi-Fi optical network terminal device from the Chinese company Tenda. The Tenda HG7 300001138enxpon version has a buffer error vulnerability. This vulnerability stems from an error in the function aspvoipOtherSet in the Web Management Interface component, where the...

TOTOLINK AC1200 T8 security vulnerabilities

The TOTOLINK AC1200 T8 is an AC1200 dual-band Mesh wireless router produced by TOTOLINK Corporation. Version 4.1.5cu.8611 of the TOTOLINK AC1200 T8 contains a security vulnerability. This vulnerability stems from incorrect operations in the vsftpd component’s configuration file /etc/vsftpd.conf,...

Tenda AC15 security vulnerabilities

The Tenda AC15 is a wireless router produced by the Chinese company Tenda. Version 15.03.05.19 of the Tenda AC15 contains a security vulnerability. This vulnerability stems from incorrect operations with the file /etcro/smb.conf in the Samba component, which may lead to weak password requirements...

D-Link DIR-823G security vulnerabilities

The D-Link DIR-823G is a wireless router produced by D-Link Corporation. The D-Link DIR-823G version 1.0.2B05 has a security vulnerability. This vulnerability stems from incorrect operations in the vsftpd component’s configuration file /etc/vsftpd.conf, which may lead to violations of the princip...

CodeAstro Human Resource Management System Cross-site Scripting Vulnerabilities

The CodeAstro Human Resource Management System is a human resource management system developed by CodeAstro Corporation. Version 1.0 of the CodeAstro Human Resource Management System has a cross-site scripting vulnerability. This vulnerability stems from incorrect handling of the Notice Title...

WordPress plugin admin-word-count-column has a path traversal vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

WordPress plugin WP24 Domain Check: Cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...