آخرین آسیب‌پذیری‌ها

Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP options

Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management

Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.

Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting

Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentials

Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules

Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation

Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root

Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup

Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates.

Session Smart Router: An attacker can cause an out-of-bounds read during VRRP packet processing

Session Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabled

X.Org Server GestureBuildSprite Use-After-Free

Session Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy feature

Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identification

X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read

X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write

Laravel MongoDB `whereDoesntHave` misses deny records for numeric string IDs

X.Org Server Glamor CopyArea Heap Buffer Overflow

FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution

USB Test: Heap-based Buffer Overflow in getSectorSize via untrusted DISK_GEOMETRY.BytesPerSector leads to RCE/DoS

Shopper: read-only team permissions allow administrator creation and permission escalation

SimulationCraft: Heap-Based Buffer Overflow / Out-of-Bounds Write in SimulationCraft's gem_id Array

X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow

YosemiteCrew: Missing organization authorization on service and PMS library/template routes