Cleartext transmission of sensitive information vulnerability exists in STARDOM FCN Controller and FCJ Controller R1.01 to R4.31, which may allow an adjacent... weiterlesen

An issue was discovered in MediaWiki through 1.38.1. The lemma length of a Wikibase lexeme is currently capped at a thousand characters. Unfortunately,... weiterlesen

... weiterlesen

DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the dcmqrdb program, it would query its database and copy the result... weiterlesen

DCMTK through 3.6.6 does not handle memory free properly. The program malloc a heap memory for parsing data, but does not free it when error in parsing.... weiterlesen

DCMTK through 3.6.6 does not handle memory free properly. The object in the program is free but its address is still used in other locations. Sending specific... weiterlesen

... weiterlesen

DCMTK through 3.6.6 does not handle memory free properly. The malloced memory for storing all file information are recorded in a global variable LST and... weiterlesen

In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gf_filter_pid_get_packet function in src/filter_core/filter_pid.c:5394, as demonstrated... weiterlesen

... weiterlesen

... weiterlesen

... weiterlesen

... weiterlesen

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this... weiterlesen

... weiterlesen

Assertion reachable with repeated LL_CONNECTION_PARAM_REQ. Zephyr versions >= v1.14 contain Reachable Assertion (CWE-617). For more information, see... weiterlesen

... weiterlesen

Invalid channel map in CONNECT_IND results to Deadlock. Zephyr versions >= v2.5.0 Improper Check or Handling of Exceptional Conditions (CWE-703). For... weiterlesen

... weiterlesen

Dell PowerScale OneFS, 8.2.x through 9.3.0.x, contain an error message with sensitive information. An administrator could potentially exploit this vulnerability,... weiterlesen

Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams.... weiterlesen

Dell PowerScale OneFS, versions 8.2.x-9.2.x, contain broken or risky cryptographic algorithm. A remote unprivileged malicious attacker could potentially... weiterlesen

... weiterlesen

... weiterlesen

Underscore.deep is a collection of Underscore mixins that operate on nested objects. Versions of `underscore.deep` prior to version 0.5.3 are vulnerable... weiterlesen

Cloudflare WARP client for Windows (up to v. 2022.5.309.0) allowed creation of mount points from its ProgramData folder. During installation of the WARP... weiterlesen

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected... weiterlesen

A remote disclosure of sensitive information vulnerability was discovered in HPE NonStop DSM/SCM version: T6031H03^ADP. HPE has provided a software update... weiterlesen

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected... weiterlesen

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected... weiterlesen

A flaw was found in PackageKit in the way some of the methods exposed by the Transaction interface examines files. This issue allows a local user to measure... weiterlesen

Synapse is an open source home server implementation for the Matrix chat network. In versions prior to 1.61.1 URL previews of some web pages can exhaust... weiterlesen

... weiterlesen

A malicious MySQL server can request local file content from a client using ruby-mysql prior to version 2.10.0 without explicit authorization from the... weiterlesen

... weiterlesen

... weiterlesen

When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in, the attacker could log in to the device by replaying... weiterlesen

Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use... weiterlesen

When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he can log in to the device by replaying... weiterlesen

If the user enables the https function on the device, an attacker can modify the user’s request data packet through a man-in-the-middle attack ,Injection... weiterlesen

When an attacker obtaining the administrative account and password, or through a man-in-the-middle attack, the attacker could send a specified crafted... weiterlesen

A vulnerability classified as critical has been found in Apple Mac OS X up to 10.11.1. This affects an unknown part of the component kext tools. The manipulation... weiterlesen

A vulnerability was found in Apple Mac OS X up to 10.11.1. It has been rated as critical. Affected by this issue is some unknown functionality of the... weiterlesen

A vulnerability was found in Apple Mac OS X up to 10.11.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality... weiterlesen

A vulnerability was found in Apple Mac OS X up to 10.11.1. It has been classified as critical. Affected is an unknown function of the component Kernel.... weiterlesen

A vulnerability was found in Apple Mac OS X up to 10.11.1 and classified as critical. This issue affects some unknown processing of the component Kernel.... weiterlesen

A vulnerability has been found in Apple Mac OS X up to 10.11.1 and classified as critical. This vulnerability affects unknown code of the component Kernel.... weiterlesen

A vulnerability, which was classified as critical, was found in Apple Mac OS X up to 10.11.1. This affects an unknown part of the component Kernel. The... weiterlesen

A vulnerability, which was classified as critical, has been found in Apple Mac OS X up to 10.11.1. Affected by this issue is some unknown functionality... weiterlesen

ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\AbstractCache.php.... weiterlesen