HCL DFXAnalytics is affected by a Using Components with Known Vulnerabilities flaw where the application utilizes unpatched libraries or sub-components, which could allow an attacker to identify and e...
Universal Security Vulnerabilities & CVE Catalog
Fast, deterministic intelligence across 391,734 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.
HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability where the Content-Security-Policy does not define strict directives for object-src and base-uri, which could all...
In nr modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed....
In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed....
In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed....
In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed....
In Modem IMS, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed....
In IMS, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed....
An issue was discovered in MM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, W920, W930, W1000, Modem 5123, and Modem ...
Jupyter Server is the backend for Jupyter web applications. In jupyter_server versions through 2.17.0, the next query parameter in the login flow is insufficiently validated in `LoginFormHandler._redi...
ISPConfig 3.3.0 is vulnerable to Cross Site Scripting (XSS) via the system status webpage....
RouterOS provides various services that rely on correct verification of client and server certificates to secure confidentiality and integrity of communications. This includes OpenVPN, CAPsMAN, Dot1x ...
The Mentoring plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.2.8. This is due to the plugin not properly restricting the roles that users can regist...
IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other users. The API does not enforce binding between the authent...
Memory corruption when another driver calls an IOCTL with invalid input/output buffer....
Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level....
Information Disclosure while processing IOCTL handler callbacks without verifying buffer size....
Memory corruption when processing camera sensor input/output control codes with invalid output buffers....
Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified....
Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming....
Transient DOS when processing target power rate tables during channel configuration....
An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXParser.cpp, ParseVectorDataArray()...
An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp, FBXConverter::ConvertMeshMultiMaterial() components...
An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXMeshGeometry.cpp, MeshGeometry::MeshGeometry()...