Results
16,974 of 48,153· Page 139/340OS command injection vulnerability exists in CL4/6NX Plus and CL4/6NX-J Plus (Japan model) with the firmware versions pr
A race condition vulnerability has been identified in Shopware's voucher system of Shopware v6.6.10.4 that allows attack
Information disclosure while accessing and modifying the PIB file of a remote device via powerline.
Memory corruption while processing simultaneous requests via escape path.
Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host.
Transient DOS while creating NDP instance.
Memory corruption while processing specific files in Powerline Communication Firmware.
Memory corruption while processing DDI command calls.
Memory corruption while processing an IOCTL command with an arbitrary address.
Memory corruption while processing DDI call with invalid buffer.
Transient DOS while processing an ANQP message.
Transient DOS while processing a frame with malformed shared-key descriptor.
Memory corruption while handling client exceptions, allowing unauthorized channel access.
Transient DOS while processing CCCH data when NW sends data with invalid length.
Memory corruption while processing commands from A2dp sink command queue.
Memory corruption when using Virtual cdm (Camera Data Mover) to write registers.
Memory corruption when programming registers through virtual CDM.
Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.
Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.
Memory corruption while submitting blob data to kernel space though IOCTL.
Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.
Multiple plugins for WordPress by emarket-design with the 'emd-form-builder-lite' package are vulnerable to Remote Code
Vulnerability of improper processing of abnormal conditions in huge page separation. Impact: Successful exploitation of
Out-of-bounds write vulnerability in the skia module. Impact: Successful exploitation of this vulnerability may affect s
Kenwood DMX958XR ReadMVGImage Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-a
Kenwood DMX958XR JKRadioService Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allo
The CleverReach® WP plugin for WordPress is vulnerable to time-based SQL Injection via the ‘title’ parameter in all vers
Binding authentication bypass vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnera
EXTRA_REFERRER resource read vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability
Authentication management vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may
Status verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will
Race condition vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect
Path traversal vulnerability in the virtualization file module. Successful exploitation of this vulnerability may affect
Path traversal vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect
Fiber is an Express inspired web framework written in Go. In versions 2.52.8 and below, when using Fiber's Ctx.BodyParse
A denial-of-service vulnerability exists in Sysax Multi-Server version 6.10 via its SSH daemon. A specially crafted SSH
ClanSphere 2011.3 is vulnerable to a local file inclusion (LFI) flaw due to improper handling of the cs_lang cookie para
Insecure Direct Object Reference (IDOR) vulnerability in PdfHandler component in Agenzia Impresa Eccobook v2.81.1 and be
Adobe Experience Manager versions 6.5.23 and earlier are affected by an Improper Restriction of XML External Entity Refe
Jointelli 5G CPE 21H01 firmware JY_21H01_A3_v1.36 devices allow (blind) OS command injection. Multiple endpoints are vul
An issue was discovered on FIRSTNUM JC21A-04 devices through 2.01ME/FN that allows authenticated attackers to execute ar
A vulnerability affecting the scanning module in Emsisoft Anti-Malware prior to 2024.12 allows attackers on a remote ser
A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to re
A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to re
A memory abuse issue exists in the Rockwell Automation Arena® Simulation. A custom file can force Arena Simulation to re
The WP Import Export Lite plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validati
The WP Import Export Lite plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validati
A low privileged local attacker can interact with the affected service although user-interaction should not be allowed.
The Use-your-Drive | Google Drive plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting
LibreChat is a ChatGPT clone with additional features. In versions 0.0.6 through 0.7.7-rc1, an exposed testing endpoint
Test your stack for 2025issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.