2024

symphonycms <=2.7.10 is vulnerable to Cross Site Scripting (XSS) in the Comment component for articles.

A Cross Site Scripting (XSS) vulnerability in Symphony CMS 2.7.10 allows remote attackers to inject arbitrary web script

An issue was discovered in Ada Web Server 20.0. When configured to use SSL (which is not the default setting), the SSL/T

The provisioning manager component of Mitel MiVoice MX-ONE through 7.6 SP1 could allow an authenticated attacker to cond

Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitrar

Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially res

Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, pote

Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escal

A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resultin

Insufficient validation of the Input Output Control (IOCTL) input buffer in AMD μProf may allow an authenticated attacke

Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged

Improper input validation in Power Management Firmware (PMFW) may allow an attacker with privileges to send a malformed

Improper validation of array index in Power Management Firmware (PMFW) may allow a privileged attacker to cause an out-o

Generation of weak and predictable Initialization Vector (IV) in PMFW (Power Management Firmware) may allow an attacker

Improper input validation in SMU may allow an attacker with privileges and a compromised physical function (PF)     to

Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, all

IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an att

A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or U

Incomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker with access to the BIO

An insufficient bounds check in PMFW (Power Management Firmware) may allow an attacker to utilize a malicious VF (virtua

A hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in in

An insufficient DRAM address validation in PMFW may allow a privileged attacker to read from an invalid DRAM address to

An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid DR

Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious tr

Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB e

Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to t

Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a privileged

Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS

A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an a

An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker with acces

Use of Default Credentials vulnerability in Tananaev Solutions Traccar Server on Administrator Panel modules allows Auth

An improper access control vulnerability [CWE-284] in FortiOS 7.4.0 through 7.4.3, 7.2.5 through 7.2.7, 7.0.12 through 7

A unverified password change in Fortinet FortiManager versions 7.0.0 through 7.0.10, versions 7.2.0 through 7.2.4, and v

An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiSOAR 7.3.0 thro

An insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and below, 7.0 all versions, 6

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiDDoS versi

"Hot" backup files may be downloaded by underprivileged users, if they are capable of acquiring a unique backup identifi

A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the pa

In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability

In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability

In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability

In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability

In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability

An issue in D3D Security D3D IP Camera (D8801) v.V9.1.17.1.4-20180428 allows a local attacker to execute arbitrary code

An unauthenticated remote attacker may use a reflected XSS vulnerability to obtain information from a user or reboot the

An unauthenticated remote attacker can use this vulnerability to change the device configuration due to a file writeable

An unauthenticated remote attacker may use stored XSS vulnerability to obtain information from a user or reboot the affe

An unauthenticated remote attacker may use a HTML injection vulnerability with limited length to inject malicious HTML c

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Rashid87 WPSection allow

Unrestricted Upload of File with Dangerous Type vulnerability in BerqWP allows Code Injection.This issue affects BerqWP: