2023

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter macFilterType and par

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter timeZone at /goform/S

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter mac at /goform/GetPar

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list and bindnum at /

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetVi

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetSt

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter time at /goform/Power

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter schedStartTime and sc

Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter firewallEn at /goform

PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function.

An adversary could cause a continuous restart loop to the entire device by sending a large quantity of HTTP GET requests

An adversary could crash the entire device by sending a large quantity of ICMP requests if the controller has the built-

The File Transfer Protocol (FTP) port is open by default in the SNAP PAC S1 Firmware version R10.3b. This could allow an

There are no requirements for setting a complex password in the built-in web server of the SNAP PAC S1 Firmware version

There is no limit on the number of login attempts in the web server for the SNAP PAC S1 Firmware version R10.3b. This co

An insufficient entropy vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerabilit

A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP operating systems. If e

An inadequate encryption strength vulnerability has been reported to affect QNAP operating systems. If exploited, the vu

A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune tim

DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting (XSS) vulnerability at /dede/freeli

DedeCMS up to and including 5.7.110 was discovered to contain a cross-site scripting (XSS) vulnerability at /dede/freeli

DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /de

DedeCMS up to and including 5.7.110 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at /de

IBM AIX 7.2, 7.3, VIOS 3.1's OpenSSH implementation could allow a non-privileged local user to access files outside of t

In Spring for Apache Kafka 3.0.9 and earlier and versions 2.9.10 and earlier, a possible deserialization attack vector e

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in GloriaFood Restaurant Menu – Food Ordering System – Table

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Booking Ultra Pro Booking Ultra Pro Appointments Booking C

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Rolf van Gelder Order Your Posts Manually plugin <= 2.2.5

The vulnerability exists in CP-Plus NVR due to an improper input handling at the web-based management interface of the a

BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injecti

CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file

BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injec

A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, which has t

A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, potentially

A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, where the s

The vulnerability exists in CP-Plus DVR due to an improper input validation within the web-based management interface of

A vulnerability has been identified in the ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, which c

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki supports

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The create acti

A privilege escalation vulnerability exists in the experimental policy mechanism in all active release lines: 16.x, 18.x

A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticat

ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allo

Walchem Intuition 9 firmware versions prior to v4.21 are missing authentication for some of the API routes of the manage

Cross Site Scripting (XSS) vulnerability in sourcecodester Student Study Center Desk Management System 1.0 allows attack

Walchem Intuition 9 firmware versions prior to v4.21 are vulnerable to improper authentication. Login credentials are st

shescape is simple shell escape library for JavaScript. This may impact users that use Shescape on Windows in a threaded

Node-SAML is a SAML library not dependent on any frameworks that runs in Node. The lack of checking of current timestamp

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any registered

Craft is a CMS for creating custom digital experiences on the web and beyond. Bypassing the validatePath function can le

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any registered