Results
25,043· Page 264/501A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in validate-color v2.1.0 when handling craft
A CWE-668 Exposure of Resource to Wrong Sphere vulnerability exists that could cause users to be misled, hiding alarms,
MELAG FTP Server 2.2.0.4 stores unencrpyted passwords of FTP users in a local configuration file.
The authentication checks of the MELAG FTP Server in version 2.2.0.4 are incomplete, which allows a remote attacker to a
Weak access control permissions in MELAG FTP Server 2.2.0.4 allow the "Everyone" group to read the local FTP configurati
MELAG FTP Server 2.2.0.4 allows an attacker to use the CWD command to break out of the FTP servers root directory and op
When installed as Windows service MELAG FTP Server 2.2.0.4 is run as SYSTEM user, which grants remote attackers to abuse
A user enumeration vulnerability in MELAG FTP Server 2.2.0.4 allows an attacker to identify valid FTP usernames.
In multiple CODESYS products, file download and upload function allows access to internal files in the working directory
Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft
Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an
Multiple CODESYS products are affected to a buffer overflow.A low privileged remote attacker may craft a request, which
In multiple CODESYS products, a low privileged remote attacker may craft a request, which cause an out-of-bounds read, r
In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, result
In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer
In multiple CODESYS products, a low privileged remote attacker may craft a request that cause a read access to an uninit
In CODESYS V2 PLCWinNT and Runtime Toolkit 32 in versions prior to V2.4.7.57 password protection is not enabled by defau
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication
The CODESYS Gateway Server V2 does not verifiy that the size of a request is within expected limits. An unauthenticated
In CODESYS Gateway Server V2 an insufficient check for the activity of TCP client connections allows an unauthenticated
In CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been compared
Multiple products of CODESYS implement a improper error handling. A low privilege remote attacker may craft a request, w
A vulnerability was found in WP-Filebase Download Manager Plugin 3.4.4. It has been rated as problematic. Affected by th
A vulnerability classified as problematic has been found in WP-SpamFree Anti-Spam Plugin 2.1.1.4. This affects an unknow
A vulnerability classified as critical was found in Simple Ads Manager Plugin. This vulnerability affects unknown code.
A vulnerability, which was classified as problematic, has been found in NewStatPress Plugin 1.2.4. This issue affects so
A vulnerability, which was classified as problematic, was found in Download Manager Plugin 2.8.99. Affected is an unknow
A vulnerability classified as problematic was found in Google Analytics Dashboard Plugin 2.1.1. Affected by this vulnera
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/adm
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/adm
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/adm
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/adm
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/adm
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/adm
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/adm
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/adm
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/adm
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/adm
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/adm
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/adm
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/adm
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/adm
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/adm
Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code exe
Multiple cross-site scripting (XSS) vulnerabilities in /bsms/?page=manage_account of Simple Bakery Shop Management Syste
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potenti
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potenti
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potenti
Test your stack for 2022issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.