Results
9,773 of 28,815· Page 114/196An issue in the MVC Device Simulator of Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Comme
Grafana is an open-source platform for monitoring and observability. Using public dashboards users can query multiple
Palantir Foundry deployments running Lime2 versions between 2.519.0 and 2.532.0 were vulnerable a bug that allowed authe
fast-xml-parser is an open source, pure javascript xml parser. fast-xml-parser allows special characters in entity names
CloudPanel v2.2.2 allows attackers to execute a path traversal.
The `Release PR Merged` workflow in the github repo taosdata/grafanaplugin is subject to a command injection vulnerabili
Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This coul
A Regular Expression Denial of Service (ReDoS) issue was discovered in the sanitize_html function of redcloth gem v4.0.0
Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This coul
The affected product does not properly validate user-supplied data. If a user opens a maliciously for
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.10.8, all versions star
The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). Th
The affected application lacks proper validation of user-supplied data when parsing project files (e.g.
The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT
Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This coul
The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP
The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).
The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CS
Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26
In Sogou Workflow v0.10.6, memcpy a negtive size in URIParser::parse , may cause buffer-overflow and crash.
There is a command injection vulnerability in the Tenda G103 Gigabit GPON Terminal with firmware version V1.0.0.5. If an
A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function
A command injection vulnerability was found in the ping functionality of the MitraStar GPT-2741GNAC router (firmware ver
An Authorization Bypass vulnerability was found in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and
The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to i
Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.
Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.
Transient DOS while parsing WLAN beacon or probe-response frame.
Transient DOS in WLAN Firmware while parsing FT Information Elements.
Transient DOS in WLAN Firmware while processing frames with missing header fields.
Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.
Memoru corruption in Audio when ADSP sends input during record use case.
Memory corruption in WLAN HOST while receiving an WMI event from firmware.
Memory corruption in Automotive GPU while querying a gsl memory node.
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network.
Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.
Memory corruption due to improper access control in kernel while processing a mapping request from root process.
Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis.
Information disclosure in Kernel due to indirect branch misprediction.
Memory corruption in Linux Networking due to double free while handling a hyp-assign.
Transient DOS due to improper authorization in Modem
Memory corruption due to double free in Core while mapping HLOS address to the list.
Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.
Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.
Transient DOS due to reachable assertion in Modem because of invalid network configuration.
information disclosure due to cryptographic issue in Core during RPMB read request.
Assertion occurs while processing Reconfiguration message due to improper validation
In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege
In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege
Test your stack for 2023issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.