Fast, deterministic intelligence across 392,912 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the region parameter in specific POST requests. This cou...
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the language parameter in specific POST requests. This c...
A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices does not sanitize the input parameters in specific GET requests. This coul...
51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API uploadoverlayimage.cgi did not have sufficient input validation to allow an attacker to upload files to block access t...
The Melhor Envio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.15.11 via the 'run' function, which uses a hardcoded hash. This makes it p...
A cross-site scripting (XSS) vulnerability in Typecho v1.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into Name parameter under a comment for an Article...
EDK2 contains a vulnerability in the HashPeImageByType(). A user may cause a read out of bounds when a corrupted data pointer and length are sent via an adjecent network. A successful exploit of this ...
Memory corruption while processing multiple IOCTL calls from HLOS to DSP....
Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation....
Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR....
Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards....
Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass....
Information disclosure while creating MQ channels....
Memory corruption while processing IOCTL calls to add route entry in the HW....
Memory corruption while accessing MSM channel map and mixer functions....
Memory corruption while invoking IOCTL map buffer request from userspace....
Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory....
Memory corruption while handling file descriptor during listener registration/de-registration....
Cryptographic issues while generating an asymmetric key pair for RKP use cases....
Memory corruption while processing IOCTL calls....
There may be information disclosure during memory re-allocation in TZ Secure OS....
Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP....
DLL Search Order Hijacking vulnerability potentially allowed an attacker with administrator privileges to load a malicious dynamic-link library and execute its code....
Permissive Cross-domain Policy with Untrusted Domains vulnerability in local API server of DestinyECM solution(versions described below) which is developed and maintained by Cyberdigm may allow Cross-...