Results
3,751 of 25,043· Page 69/76ImpressCMS before 1.4.2 allows unauthenticated remote code execution via ...../// directory traversal in origName or ima
Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC
Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.
Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially perform
Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user
A Server-Side Template Injection (SSTI) vulnerability in the Registration and Forgotten Password forms of Magnolia v6.2.
An issue in the Freemark Filter of Magnolia CMS v6.2.11 and below allows attackers to bypass security restrictions and e
The package vm2 before 3.9.6 are vulnerable to Sandbox Bypass via direct access to host error objects generated by node
It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 co
A vulnerability was discovered in Tenda AC9 v3.0 V15.03.06.42_multi and Tenda AC9 V1.0 V15.03.05.19(6318)_CN which allow
In GKI_getbuf of gki_buffer.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead t
ismsEx service is a vendor service in unisoc equipment。ismsEx service is an extension of sms system service，but it does
ims_ex is a vendor system service used to manage VoLTE in unisoc devices，But it does not verify the caller's permissions
Summary:Product: AndroidVersions: Android SoCAndroid ID: A-204686438
Tokheim Profleet DiaLOG 11.005.02 is affected by SQL Injection. The component is the Field__UserLogin parameter on the l
Nokia BTS TRS web console FTM_W20_FP2_2019.08.16_0010 allows Authentication Bypass. A malicious unauthenticated user can
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary file
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary file
A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could lead to remote code execution
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution du
A CWE-269: Improper Privilege Management vulnerability exists that could cause an arbitrary command execution when the s
A Cross Site Scripting (XSS) vulnerability exists in Projeqtor 9.3.1 via /projeqtor/tool/saveAttachment.php, which allow
Dairy Farm Shop Management System v1.0 was discovered to contain hardcoded credentials in the source code which allows a
Drupal's JSON:API and REST/File modules allow file uploads through their HTTP APIs. The modules do not correctly run all
An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default co
When running Apache Cassandra with the following configuration: enable_user_defined_functions: true enable_scripted_user
Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto,
In Portainer Agent before 2.11.1, an API server can continue running even if not associated with a Portainer instance in
Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for DLL files
Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have a Stack-Based Buffer Overflow related to XFA, for
Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situatio
Novel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery (SSRF) via user-supplied crafted input.
A Code Execution vulnerability exists in Statamic Version through 3.2.26 via SettingsController.php. NOTE: the vendor in
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker t
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker t
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker t
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker t
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker t
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker t
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker t
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker t
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker t
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker t
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker t
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker t
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker t
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker t
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker t
In Ifme, versions 1.0.0 to v.7.33.2 don’t properly invalidate a user’s session even after the user initiated logout. It
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo
Test your stack for 2022issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.