Vulnerability Intelligence
Reviewed CVE records, security advisories and in-depth analysis — every entry linked to its official source.
Zyxel Gs1900-8 Firmware < 2.90(aahh.2)c0
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a…
Encode Starlette >= 0.8.3, < 1.0.1
Kludex Starlette HTTP Request/Response Smuggling Vulnerability
Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because the routing algorithm relies on the raw…
Linux Linux Kernel >= 3.9, <= 5.10.257
Linux Kernel Missing Initialization of a Variable Vulnerability
In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG set, the…
Fortinet Fortios >= 6.4.0, < 7.4.10
Fortinet Multiple Products Path Traversal Vulnerability
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions,…
Cisco Secure Firewall Management Center 7.0.0
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability
A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to…
Fortinet Fortios >= 6.4.0, < 7.0.18
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager…
Linux Linux Kernel >= 2.6.38, < 5.10.245
Linux Kernel Race Condition Vulnerability
In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg – Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is bogus as the data will…
Linux Linux Kernel >= 6.0, < 6.1.149
Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either – only contiguous DATA records (any number…
Tukaani Xz 5.6.0
Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised…
Strapi Strapi >= 3.2.1, < 4.8.0
Strapi Cleartext Storage of Sensitive Information Vulnerability
Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns that contain sensitive information…