2023

A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially cr

A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially cr

A stack-based buffer overflow vulnerability exists in the httpd manage_request functionality of Yifan YF325 v1.0_2022110

A stack-based buffer overflow vulnerability exists in the libutils.so nvram_restore functionality of Yifan YF325 v1.0_20

An OS command injection vulnerability exists in the data.cgi xfer_dns functionality of peplink Surf SOHO HW1 v6.3.5 (in

A stored cross-site scripting (XSS) vulnerability exists in the upload_brand.cgi functionality of peplink Surf SOHO HW1

A stack-based buffer overflow vulnerability exists in the httpd gwcfg.cgi get functionality of Yifan YF325 v1.0_20221108

A leftover debug code vulnerability exists in the httpd debug credentials functionality of Yifan YF325 v1.0_20221108. A

A command execution vulnerability exists in the validate.so diag_ping_start functionality of Yifan YF325 v1.0_20221108.

A stack-based buffer overflow vulnerability exists in the httpd do_wds functionality of Yifan YF325 v1.0_20221108. A spe

An OS command injection vulnerability exists in the admin.cgi MVPN_trial_init functionality of peplink Surf SOHO HW1 v6.

An OS command injection vulnerability exists in the admin.cgi USSD_send functionality of peplink Surf SOHO HW1 v6.3.5 (i

An authentication bypass vulnerability exists in the httpd nvram.cgi functionality of Yifan YF325 v1.0_20221108. A speci

A vulnerability of authentication bypass has been found on a Zebra Technologies ZTC ZT410-203dpi ZPL printer. This vulne

An Insecure Direct Object Reference (IDOR) vulnerability leads to events profiles access in Elenos ETG150 FM transmitter

Vulnerability of mutual exclusion management in the kernel module.Successful exploitation of this vulnerability will aff

Vulnerability of undefined permissions in the MeeTime module.Successful exploitation of this vulnerability will affect a

Vulnerability of access permissions not being strictly verified in the APPWidget module.Successful exploitation of this

Out-of-bounds array vulnerability in the dataipa module.Successful exploitation of this vulnerability may affect service

Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the

Vulnerability of defects introduced in the design process in the screen projection module.Successful exploitation of th

Vulnerability of permissions not being strictly verified in the window management module.Successful exploitation of this

HCL Digital Experience is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In

Incorrect Authorization in GitHub repository tiann/kernelsu prior to v0.6.9.

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2.

Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper. If SASL Quorum Peer authentication i

Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability m

Out-of-bounds access vulnerability in the audio module.Successful exploitation of this vulnerability may affect availabi

API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may caus

Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may aff

Out-of-bounds read vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect servic

Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability can cau

The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of th

Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may aff

Vulnerability of the permission to access device SNs being improperly managed.Successful exploitation of this vulnerabil

Use-After-Free (UAF) vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause

Parameter verification vulnerability in the window module.Successful exploitation of this vulnerability may cause the si

Adobe Bridge versions 12.0.4 (and earlier) and 13.0.3 (and earlier) are affected by an Out-of-bounds Read vulnerability

Adobe Bridge versions 12.0.4 (and earlier) and 13.0.3 (and earlier) are affected by a Use After Free vulnerability that

Adobe Photoshop versions 23.5.5 (and earlier) and 24.7 (and earlier) are affected by an Access of Uninitialized Pointer

Clone vulnerability in the huks ta module.Successful exploitation of this vulnerability may affect service confidentiali

Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability

Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the

Vulnerability of package names' public keys not being verified in the security module.Successful exploitation of this vu

Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier.

Directory traversal vulnerability in MCL-Net versions prior to 4.6 Update Package (P01) may allow attackers to read arbi

Cross-Site Request Forgery (CSRF) vulnerability in Nitin Rathod WP Forms Puzzle Captcha plugin <= 4.1 versions.

An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Route

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Route