Results
8,491 of 20,154· Page 72/170UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. A malicious user can exploit the o
In SapphireIMS 5.0, there is no CSRF token present in the entire application. This can lead to CSRF vulnerabilities in c
An arbitrary file deletion vulnerability exists within Maccms10.
A cross site scripting (XSS) vulnerability in the background search function of Maccms10 allows attackers to execute arb
In SapphireIMS 4097_1, a guest user is able to change the password of an administrative user by utilizing an Insecure Di
The Media_RewriteODFrame function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference)
The gf_media_export_filters function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereferen
The gf_hinter_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) v
All versions of package merge-change are vulnerable to Prototype Pollution via the utils.set function.
Certain invalid URL entries contained in an External Dynamic List (EDL) cause the Device Server daemon (devsrvr) to stop
A cryptographically weak pseudo-random number generator (PRNG) is used during authentication to the Palo Alto Networks P
An improper authentication vulnerability exists in Palo Alto Networks PAN-OS software that enables a SAML authenticated
An OS command argument injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated a
MIRACASE MHUB500 USB splitters through 2021-08-09, in certain specific use cases in which the device supplies power to a
JBL Go 2 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a te
Logitech Z120 and S120 speakers through 2021-08-09 allow remote attackers to recover speech signals from an LED on the d
CREATIVE Pebble devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, v
Raspberry Pi 3 B+ and 4 B devices through 2021-08-09, in certain specific use cases in which the device supplies power t
Sony SRS-XB33 and SRS-XB43 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on th
TP-Link UE330 USB splitter devices through 2021-08-09, in certain specific use cases in which the device supplies power
IBM Security Guardium 11.2 could disclose sensitive information due to reliance on untrusted inputs that could aid in fu
The Securimage-WP-Fixed WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER['PHP
Improper input validation in some Intel(R) Optane(TM) PMem versions before versions 1.2.0.5446 or 2.2.0.1547 may allow a
Use after free in some Intel(R) Graphics Driver before version 27.20.100.8336, 15.45.33.5164, and 15.40.47.5166 may allo
Out-of-bounds read in the firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before
Uncontrolled resource consumption in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapt
Uncaught exception in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before vers
Improper conditions check in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters befo
Uncaught exception in firmware for Intel(R) Ethernet Adapters 800 Series Controllers and associated adapters before vers
Improper buffer restrictions in the firmware of Intel(R) Ethernet Adapters 800 Series Controllers and associated adapter
Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before version 1.4.11 may allow
Certain NETGEAR devices are affected by privilege escalation. This affects D8500 before 1.0.3.44, R6400v2 before 1.0.2.6
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, R8900 bef
Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 be
Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 be
Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 be
Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6100 bef
NETGEAR RAX40 devices before 1.0.3.64 are affected by stored XSS.
NETGEAR WAC104 devices before 1.0.4.15 are affected by incorrect configuration of security settings.
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.4
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX35 before 1.0.
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 befor
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects MK62 before
NETGEAR R6400 devices before 1.0.1.70 are affected by a stack-based buffer overflow by an authenticated user.
NETGEAR R6400 devices before 1.0.1.52 are affected by a stack-based buffer overflow by an authenticated user.
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400 before 1.0.1.50,
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6400 before 1.0.1.52,
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6250 before 1.0.4.36,
Certain NETGEAR devices are affected by out-of-bounds reads and writes. This affects R6400 before 1.0.1.70, RAX75 before
A cross-site request forgery (CSRF) vulnerability in the My SMTP Contact v1.1.1 plugin for GetSimple CMS allows remote a
Test your stack for 2021issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.