396856 matches found
CVE-2022-24709: Improper Neutralization of Input During Web Page Generation
@awsui/components-react is the main AWS UI package which contains React components, with TypeScript definitions designed for user interface development. Multiple components in versions before 3.0.367 have been found to not properly neutralize user input and may allow for javascript injection. Use...
CVE-2021-4070: Off-by-one Error
Off-by-one Error in GitHub repository v2fly/v2ray-core prior to 4.44.0...
CVE-2022-24620: Improper Neutralization of Input During Web Page Generation
Piwigo version 12.2.0 is vulnerable to stored cross-site scripting XSS, which can lead to privilege escalation. In this way, admin can steal webmaster's cookies to get the webmaster's access...
CVE-2021-26256: Improper Neutralization of Input During Web Page Generation
Unauthenticated Stored Cross-Site Scripting XSS vulnerability discovered in Survey Maker WordPress plugin versions = 2.0.6...
CVE-2016-20013: Allocation of Resources Without Limits or Throttling
sha256crypt and sha512crypt through 0.6 allow attackers to cause a denial of service CPU consumption because the algorithm's runtime is proportional to the square of the length of the password...
CVE-2021-44968: Use After Free
A Use after Free vulnerability exists in IOBit Advanced SystemCare 15 pro via requests sent in sequential order using the IOCTL driver codes, which could let a malicious user execute arbitrary code or a Denial of Service system crash. IOCTL list: iobitioctl = 0x8001e01c, 0x8001e020, 0x8001e024,...
CVE-2021-46597: Use After Free
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-46631: Use of Uninitialized Variable
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2022-24354: Integer Overflow or Wraparound
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 prior to 1.1.4 Build 20211022 rel.591035553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NetUSB.ko module. The...
CVE-2021-29655: Insufficient Verification of Data Authenticity
Pexip Infinity Connect before 1.8.0 omits certain provisioning authenticity checks. Thus, untrusted code may execute...
CVE-2021-43301: Stack-based Buffer Overflow
Stack overflow in PJSUA API when calling pjsuaplaylistcreate. An attacker-controlled 'filenames' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any size validation...
CVE-2022-23358: Improper Neutralization of Special Elements used in an SQL Command
EasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php. In the background, search terms provided by the user were not sanitized and were used directly to construct a SQL statement...
CVE-2020-6921: Undefined Security Weakness
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software...
CVE-2019-25057: Undefined Security Weakness
In Corda before 4.1, the meaning of serialized data can be modified via an attacker-controlled CustomSerializer...
CVE-2021-25107: Improper Neutralization of Input During Web Page Generation
The Form Store to DB WordPress plugin before 1.1.1 does not sanitise and escape parameter keys before outputting it back in the created entry, allowing unauthenticated attacker to perform Cross-Site Scripting attacks against admin...
CVE-2022-0190: Improper Neutralization of Special Elements used in an SQL Command
The Ad Invalid Click Protector AICP WordPress plugin before 1.2.6 is affected by a SQL Injection in the id parameter of the delete action...
CVE-2022-0302: Use After Free
Use after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page...
CVE-2021-22806: Incorrect Resource Transfer Between Spheres
A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could cause data exfiltration and unauthorized access when accessing a malicious website. Affected Product: spaceLYnk V2.6.1 and prior, Wiser for KNX V2.6.1 and prior, fellerLYnk V2.6.1 and prior...
CVE-2021-4098: Time-of-check Time-of-use (TOCTOU) Race Condition
Insufficient data validation in Mojo in Google Chrome prior to 96.0.4664.110 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...
CVE-2021-4101: Out-of-bounds Write
Heap buffer overflow in Swiftshader in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2022-0483: Uncontrolled Search Path Element
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor Windows before build 53...
CVE-2022-22810: Improper Restriction of Excessive Authentication Attempts
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to manipulate the admin after numerous attempts at guessing credentials. Affected Product: spaceLYnk V2.6.2 and prior, Wiser for KNX formerly homeLYnk V2.6.2 and prior, fellerLYn...
CVE-2021-33101: Uncontrolled Search Path Element
Uncontrolled search path in the IntelR GPA software before version 21.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-23611: Improper Neutralization of Special Elements used in an OS Command
iTunesRPC-Remastered is a Discord Rich Presence for iTunes on Windows utility. In affected versions iTunesRPC-Remastered did not properly sanitize image file paths leading to OS level command injection. This issue has been patched in commit cdcd48b. Users are advised to upgrade...
CVE-2022-23614: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Twig is an open source template language for PHP. When in a sandbox mode, the arrow parameter of the sort filter must be a closure to avoid attackers being able to run arbitrary PHP functions. In affected versions this constraint was not properly enforced and could lead to code injection of...
CVE-2022-0419: NULL Pointer Dereference
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0...
CVE-2021-44376: Improper Input Validation
A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. SetIsp param is not object. An attacker can send an HTTP request to trigger this vulnerability...
CVE-2021-46546: Undefined Security Weakness
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjsnext at src/mjsobject.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2022-0368: Out-of-bounds Read
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2...
CVE-2021-25078: Improper Neutralization of Input During Web Page Generation
The Affiliates Manager WordPress plugin before 2.9.0 does not validate, sanitise and escape the IP address of requests logged by the click tracking feature, allowing unauthenticated attackers to perform Cross-Site Scripting attacks against admin viewing the tracked requests...
CVE-2021-44090: Improper Neutralization of Special Elements used in an SQL Command
An SQL Injection vulnerability exists in Sourcecodester Online Reviewer System 1.0 via the password parameter...
CVE-2021-46025: Improper Neutralization of Input During Web Page Generation
A Cross SIte Scripting XSS vulnerability exists in OneBlog = 2.2.8. via the add function in the operation tab list in the background...
CVE-2022-23307: Deserialization of Untrusted Data
CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists...
CVE-2021-46169: Use After Free
Modex v2.11 was discovered to contain an Use-After-Free vulnerability via the component tcache...
CVE-2021-39032: Insertion of Sensitive Information into Log File
IBM Sterling Gentran:Server for Microsoft Windows 5.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 213962...
CVE-2020-12938: Undefined Security Weakness
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...
CVE-2021-40813: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in the "Zip content" feature in Element-IT HTTP Commander 3.1.9 allows remote authenticated users to inject arbitrary web script or HTML via filenames...
CVE-2021-34912: Out-of-bounds Read
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2022-22824: Integer Overflow or Wraparound
defineAttribute in xmlparse.c in Expat aka libexpat before 2.4.3 has an integer overflow...
CVE-2021-40004: Incorrect Default Permissions
The cellular module has a vulnerability in permission management. Successful exploitation of this vulnerability may affect data confidentiality...
CVE-2021-45960: Incorrect Calculation
In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory...
CVE-2021-45617: Improper Neutralization of Special Elements used in a Command
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5.0.24, EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX7500 before 1.0.0.72, R6400 before 1.0.1.68, R6900P before 1.3.2.132, R7000 before 1.0.11.116, R7000P before 1.3.2.132, R79...
CVE-2021-45484: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG...
CVE-2021-45469: Out-of-bounds Read
In f2fssetxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when an inode has an invalid last xattr entry...
CVE-2021-20318: Deserialization of Untrusted Data
The HornetQ component of Artemis in EAP 7 was not updated with the fix for CVE-2016-4978. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using a JMS ObjectMessage...
CVE-2020-20601: Improper Control of Generation of Code
An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet...
CVE-2020-11380: Undefined Security Weakness
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...
CVE-2019-2357: Undefined Security Weakness
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none...
CVE-2021-42550: Deserialization of Untrusted Data
In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers...