CWE-233: CWE-233

This vulnerability in Juniper Networks Junos OS J-Web interface allows authenticated attackers to manipulate client-side parameters, potentially bypas...

This vulnerability in Google Chrome's updater allows a local attacker to escalate privileges by exploiting improper implementation. Attackers could ga...

This vulnerability in Cisco IOx allows authenticated remote attackers to execute arbitrary commands as root on the host operating system by deploying ...

This vulnerability in Eclipse ThreadX allows attackers to bypass memory protection mechanisms and perform arbitrary memory read/write operations when ...

This vulnerability in Eclipse Glassfish allows attackers to redirect users to malicious websites via manipulated HTTP Host parameters when accessing t...

CVE-2023-1419 is a script injection vulnerability in Debezium database connectors where improper parameter sanitization allows attackers to inject mal...

This vulnerability in Eclipse ThreadX allows attackers to cause denial of service by providing pointers to unmapped memory regions. The system call va...

Authenticated users of certain HIKSEMI NAS products can cause abnormal device behavior by sending crafted messages to an interface with insufficient i...

This CVE describes a Cross-Site Scripting (XSS) vulnerability in TOTOLINK X2000R routers that allows remote attackers to inject malicious scripts via ...