197111 matches found
Bitdefender Napoca buffer error vulnerability
Bitdefender Napoca is a lightweight Type-1 bare-machine virtual machine monitor developed by Bitdefender as open source. Bitdefender Napoca has a buffer error vulnerability, which stems from an out-of-bounds write in the BIOS INT 0x15/E820 memory mapping processing routine. This vulnerability cou...
WordPress plugin Wallet System for WooCommerce has a security vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...
WordPress plugin BookIt has a security vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
OpenTelemetry eBPF Instrumentation security vulnerabilities
OpenTelemetry eBPF Instrumentation is an open-source eBPF-based lightweight telemetry data collection tool developed by OpenTelemetry. Versions of OpenTelemetry eBPF Instrumentation prior to 0.9.0 contained security vulnerabilities. These vulnerabilities stemmed from replacing the ELF parser’s...
NiceGUI information leakage vulnerability
NiceGUI is an easy-to-use, Python-based UI framework developed under the open source license. Versions of NiceGUI prior to 3.12.0 contained a vulnerability related to information leakage. This vulnerability stemmed from the fact that the ui.restructuredtext function did not disable the file...
Vivotek VIVOTEK FD8136-VVTK security vulnerabilities
Vivotek VIVOTEK FD8136-VVTK is a super-miniature fixed dome network camera firmware developed by Vivotek Corporation. The Vivotek VIVOTEK FD8136-VVTK 0300a version contains a security vulnerability. This vulnerability stems from path traversal within the /admin/downloadMedias.cgi endpoint, which...
Vivotek VIVOTEK FD8136-VVTK security vulnerabilities
Vivotek VIVOTEK FD8136-VVTK is a super-miniature fixed dome network camera firmware developed by Vivotek Corporation. The Vivotek VIVOTEK FD8136-VVTK 0300a version contains a security vulnerability. This vulnerability stems from a stack buffer overflow in the motionprivacy.cgi binary file. When t...
Dräger Infinity M300 Resource Management Error Vulnerability
The Dräger Infinity M300 is a wearable telemetry patient monitoring device developed by the German company Dräger. Versions of the Dräger Infinity M300 prior to version 2.3.1 contained a resource management vulnerability. This vulnerability stemmed from a network-based denial-of-service issue,...
Dräger Perseus A500 security vulnerability
The Dräger Perseus A500 is a high-end anesthesia workstation developed by the German company Dräger. There are security vulnerabilities in the Dräger Perseus A500 between versions 2.00 and 2.02. These vulnerabilities stem from improper input processing, which could allow external attackers to sen...
Dell ThinOS 10 Access Control Vulnerability
Dell ThinOS 10 is an operating system developed by the American company Dell. Versions prior to Dell ThinOS 10 260210.0765 contained a vulnerability related to access control. This vulnerability stemmed from improper access control mechanisms, which could allow low-privilege attackers with local...
NamelessMC security vulnerabilities
NamelessMC is a free, easy-to-use, and powerful website software developed by the NamelessMC team. It’s suitable for your Minecraft server and comes with numerous features. Version 2.2.4 of NamelessMC has a security vulnerability that arises from not verifying the authorization of viewers before...
react-router cross-site scripting vulnerability
react-router is a declarative routing library for React, open-sourced by Remix. Versions of react-router from 7.5.1 to 7.13.1 have a cross-site scripting vulnerability. This vulnerability stems from improper handling of the HTTP Location header value in framework mode with pre-rendering enabled,...
Dräger SC Monitoring devices trust management vulnerabilities
The Dräger SC Monitoring devices are a series of clinical vital signs monitoring devices produced by the German company Dräger. The Dräger SC Monitoring devices have a vulnerability related to trust management. This vulnerability stems from hard-coded plaintext credentials in the source code, alo...
DesDev DedeCMS SQL Injection Vulnerability
DesDev DedeCMS is an open-source content management system CMS developed by DesDev Corporation. It is built using PHP. This system offers functions such as content publishing, content management, content editing, and content retrieval. Version 5.7.88 of DesDev DedeCMS contains a SQL injection...
Next Level Builder GoClaw Authorization Issue Vulnerability
Goclaw is an open-source multi-tenant AI smart agent platform developed by Next Level Builder. Versions of GoClaw 3.11.3 and earlier contain security vulnerabilities. These vulnerabilities stem from a flaw in the Team Task Completion Handler component, where the TeamTasksTool.executeComplete...
TP-Link Tapo C200 security vulnerabilities
The TP-Link Tapo C200 is a webcam device produced by TP-Link Corporation. The TP-Link Tapo C200 v5 version has a security vulnerability. This vulnerability stems from an improper validation of the length of the Authorization header field during RTSP authentication processing. This can lead to a...
NVIDIA NVTabular code-related vulnerabilities
NVIDIA NVTabular is a component within the deep learning recommendation system framework developed by NVIDIA Corporation. NVIDIA NVTabular has code-related vulnerabilities; these vulnerabilities stem from improper deserialization of untrusted data, which may lead to code execution, data tampering...
Google Chrome: Input validation error vulnerability
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 had a vulnerability related to input validation. This vulnerability stemmed from insufficient input validation in the Codecs component, which could allow remote attackers to execute a sandbox...
Google Chrome: Input validation error vulnerability
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 had a vulnerability related to input validation errors. This vulnerability stemmed from insufficient validation of untrusted inputs by the GPU component. A remote attacker could exploit this...
Google Chrome security vulnerabilities
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability, which was caused by improper implementation of the Dawn component. This vulnerability could allow remote attackers to execute out-of-bound memory access...
Google Chrome security vulnerabilities
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability caused by integer overflow in the GPU. This vulnerability could allow remote attackers to execute out-of-bound memory access through specially crafted HTML...
Google Chrome security vulnerabilities
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability. This vulnerability stemmed from improper implementations in the Password Manager. Remote attackers could exploit this vulnerability through specially crafte...
Google Chrome buffer error vulnerability
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a buffer overflow vulnerability. This vulnerability stemmed from an out-of-bounds read in the WebRTC component, which could allow remote attackers to extract sensitive information fr...
Google Chrome Resource Management Error Vulnerability
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 had a resource management vulnerability. This vulnerability stemmed from the reuse of resources after the Codecs component was released, which could allow remote attackers to execute a sandbox...
Google Chrome: Input validation error vulnerability
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 had a vulnerability related to input validation. This vulnerability stemmed from improper implementation of the Printing component, which could allow remote attackers to exploit the system by...
Google Chrome: Input validation error vulnerability
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 had a vulnerability related to input validation. This vulnerability stemmed from insufficient validation of untrusted inputs in Codecs, which could allow remote attackers to execute out-of-bou...
Google Chrome Resource Management Error Vulnerability
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a resource management vulnerability. This vulnerability stemmed from the use of reusing after releasing in WebView, which could allow local attackers to execute arbitrary code throug...
Google Chrome security vulnerabilities
Google Chrome is a web browser developed by the American company Google. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability. This vulnerability stemmed from insufficient execution of the Paint policy, allowing remote attackers to bypass the same-origin policy...
Microsoft Edge security vulnerabilities
Microsoft Edge is a web browser included with Windows 10 and later versions from Microsoft. There is a security vulnerability in Microsoft Edge, which stems from a memory violation that occurs when the program processes specially crafted web pages for rendering...
Google Chrome security vulnerabilities
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability, which was caused by improper implementation of the WebView component. This vulnerability could allow remote attackers to leak cross-source data through...
Google Chrome Resource Management Error Vulnerability
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a resource management vulnerability. This vulnerability stemmed from the reuse of the File Input component after it was released, potentially allowing a remote attacker to exploit a...
Google Chrome security vulnerabilities
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability, which was caused by improper implementations in the Keyboard component. Remote attackers could inject arbitrary scripts or HTML through specially crafted HT...
Google Chrome Resource Management Error Vulnerability
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a resource management vulnerability. This vulnerability stemmed from a problem with the Updater component, where objects were reused after being released. This could allow local...
BlenderMCP security vulnerabilities
BlenderMCP is a 3D modeling control tool developed by ahujasid that connects Blender with AI. BlenderMCP has a security vulnerability, which stems from the operation of the Open function in the file src/blendermcp/server.py regarding the parameter inputimageurl, potentially leading to exploitatio...
Authentik input validation error vulnerability
Authentik is an open-source identity provisioning application. Versions of Authentik prior to 2026.2.3 had a vulnerability related to input validation errors. This vulnerability stemmed from the WS-Federation provider’s use of raw string prefixes for validation instead of proper URL parsing, whic...
Tesla security vulnerabilities
Tesla is an electric vehicle produced by the American company Tesla. Versions of Tesla from 0.8.0 to 1.18.3 contained security vulnerabilities. These vulnerabilities were due to Tesla.Multipart.addcontenttypeparam/2 not verifying CR or LF characters, which could lead to HTTP header injection...
React-Router input validation vulnerability
react-router is a declarative routing library for React, open-sourced by Remix. There were input validation vulnerabilities in the versions of react-router from 7.0.0 to 7.14.0, and from 6.7.0 to 6.30.3. These vulnerabilities stemmed from the fact that path values starting with “//” were...
aiohttp access control error vulnerability
aiohttp is an open-source framework developed by aio-libs, used for asynchronous HTTP client/server interactions with asyncio and Python. Versions of aiohttp prior to 3.14.0 contained a access control vulnerability; this vulnerability stemmed from the use of cookies set using the “cookies”...
Dräger Core and Dräger M540 Converter Service resource management error vulnerabilities
Both the Dräger Core and Dräger M540 Converter Service are products of the German company Dräger. The Dräger Core is a medical device remote access and control platform. The Dräger M540 Converter Service is a medical device data conversion service. Versions 1.0.5 of Dräger Core and 1.0.9 of Dräge...
Dräger Zeus IE and Dräger Zeus RS C500 security vulnerabilities
Both Dräger Zeus IE and Dräger Zeus RS C500 are intelligent anesthesia workstations produced by the German company Dräger. Both devices have security vulnerabilities; these vulnerabilities stem from local security issues, which may allow unauthorized individuals to manipulate the software’s...
Dräger Protector Software security vulnerabilities
Dräger Protector Software is a gas detection and safety monitoring management platform developed by the German company Dräger. Versions of Dräger Protector Software prior to version 6.4.2 contained security vulnerabilities. These vulnerabilities were due to insecure file system permissions, which...
Authentik Authorization Issue Vulnerability
Authentik is an open-source identity provisioning application. Versions of Authentik before 2025.12.6, 2026.2.4, and 2026.5.1 have vulnerabilities related to authorization. These vulnerabilities stem from the possibility of sending empty POST requests, which may bypass the authentication phase...
Protocol Authorization Vulnerabilities
Protocol is a multi-version Minecraft support protocol library developed by Cloudburst. Versions of Protocol prior to 3.0.0.Beta12-20260420.182526-15 contained vulnerabilities related to authorization issues. These vulnerabilities stemmed from a lack of verification for FULL type authentication...
WordPress plugin ARMember Premium has a licensing issue vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
National Instruments Ni-Pal security vulnerability
National Instruments Ni-Pal is a software component of the American company National Instruments. It serves to provide necessary functions for multiple NI drivers. National Instruments Ni-Pal versions prior to 26.3.0 contain security vulnerabilities. These vulnerabilities stem from improper input...
SourceCodester Human Resource Management security vulnerabilities
SourceCodester Human Resource Management is an open-source human resource management system developed by SourceCodester. Version 1.0 of SourceCodester Human Resource Management contains a security vulnerability. This vulnerability stems from the handling of the parameter employeeid in the Employe...
Use Memos: Cross-Site Scripting Vulnerabilities
Memos is an open-source memo center with knowledge management and social features, hosted on a server. Version 0.26.0 of Memos contains a security vulnerability. This vulnerability stems from cross-site scripting vulnerabilities in the SANITIZESCHEMA,Memo Rendering Component, and Public/Private...
SolarWinds Web Help Desk security vulnerabilities
SolarWinds Web Help Desk is a service desk and asset management software provided by the American company SolarWinds. This software supports centralized knowledge bases, IT asset management, project and task management functions. There is a security vulnerability in SolarWinds Web Help Desk, whic...
DesDev DedeCMS SQL Injection Vulnerability
DesDev DedeCMS is an open-source content management system CMS developed by DesDev Corporation, based on PHP. This system offers functions such as content publishing, content management, content editing, and content retrieval. Version 5.7.88 of DesDev DedeCMS contains a SQL injection vulnerabilit...
Dräger Atlan A350 security vulnerability
The Dräger Atlan A350 is a high-end anesthesia workstation developed by the German company Dräger. There were security vulnerabilities in the Dräger Atlan A350 between versions 1.00 and 1.01. These vulnerabilities stemmed from improper input processing, which could allow attackers to send special...