Results
28,815· Page 89/577Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited
A time-of-check to time-of-use (TOCTOU) bug in handling of IOCTL (input/output control) requests. This TOCTOU bug leads
Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting (XSS) via the profile picture file upload func
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in GARY JEZORSKI CloudNet360 plugin <= 3.2.0 versions.
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in sahumedia SAHU TikTok Pixel for E-Commerce plugin <= 1
In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the buffer was identified.
An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An atta
WeBid <=1.2.2 is vulnerable to code injection via admin/categoriestrans.php.
PILOS is an open source front-end for BigBlueButton servers with a built-in load balancer. The password reset component
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in D. Relton Medialist plugin <= 1.3.9 versions.
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ashish Ajani WordPress Simple HTML Sitemap plugin <= 2.1 v
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FLOWFACT WP Connector plugin <= 2.1.7 versions.
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Enej Bajgoric / Gagan Sandhu / CTLT DEV User Avatar plugin
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Jens Kuerschner Add to Calendar Button plugin <=
An arbitrary code execution which results in privilege escalation was discovered in Helix Core versions prior to 2023.2.
In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the commit function was id
The Bastion provides authentication, authorization, traceability and auditability for SSH accesses. SCP and SFTP plugins
In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the shutdown function was
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kathy Darling Simple User Listing plugin <= 1.9.2 versions
An improper input validation vulnerability has been found in Lanaccess ONSAFE MonitorHM affecting version 3.7.0. This vu
Permission control vulnerability in the call module. Successful exploitation of this vulnerability may affect service co
Permission management vulnerability in the multi-screen interaction module. Successful exploitation of this vulnerabilit
The remote PIN module has a vulnerability that causes incorrect information storage locations.Successful exploitation of
Permission control vulnerability in the window management module. Successful exploitation of this vulnerability may caus
Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerability can affect NFC ava
Vulnerability of parameters being out of the value range in the QMI service module. Successful exploitation of this vuln
Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause p
Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause p
Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerability can affect NFC ava
Unauthorized startup vulnerability of background apps. Successful exploitation of this vulnerability may cause backgroun
Vulnerability of background app permission management in the framework module. Successful exploitation of this vulnerabi
Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause p
Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause p
Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause p
Vulnerability of input parameters being not strictly verified in the input. Successful exploitation of this vulnerabilit
Race condition vulnerability in the kernel module. Successful exploitation of this vulnerability may cause variable valu
In versions of FreeBSD 13-RELEASE before 13-RELEASE-p5, under certain circumstances the cap_net libcasper(3) service inc
In versions of FreeBSD 12.4-RELEASE prior to 12.4-RELEASE-p7 and FreeBSD 13.2-RELEASE prior to 13.2-RELEASE-p5 the __sfl
Security vulnerability in the face unlock module. Successful exploitation of this vulnerability may affect service confi
Vulnerability of missing encryption in the card management module. Successful exploitation of this vulnerability may aff
Cross Site Scripting vulnerability in timetec AWDMS v.2.0 allows an attacker to obtain sensitive information via a craft
An issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem (Exynos 9810, 9
An issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem (Exynos 9810, 9
Deserialization of Untrusted Data, Improper Input Validation vulnerability in Apache UIMA Java SDK, Apache UIMA Java SDK
Improper Restriction of Excessive Authentication Attempts vulnerability in Samsung Smart TV UE40D7000 version T-GAPDEUC-
Vulnerability of improper permission control in the Booster module. Impact: Successful exploitation of this vulnerabilit
Vulnerability of identity verification being bypassed in the face unlock module. Successful exploitation of this vulnera
Out-of-bounds vulnerability in the sensor module. Successful exploitation of this vulnerability may cause mistouch preve
Use-After-Free (UAF) vulnerability in the dubai module. Successful exploitation of this vulnerability will affect avail
Multi-thread vulnerability in the idmap module. Successful exploitation of this vulnerability may cause features to perf
Test your stack for 2023issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.