All CVEs — page 419 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows unauthenticated attackers to reset any storefront account password through the PUT /user/updatePwd endpoint, enabling account takeover and access to sensitive data.
The vulnerability allows command injection through the password1 argument in the /api/ZRnetwork/set_passwd endpoint, enabling remote attackers to execute arbitrary commands.
A command injection vulnerability exists in Ziroom ZHOME A0101 1.0.1.0, allowing remote attackers to execute arbitrary commands via the mac argument.
The vulnerability allows command injection through the manipulation of the 'ip' argument, enabling remote attackers to execute arbitrary commands on the server.
The flaw allows command injection via manipulation of the login_pwd argument in the /api/ZRnetwork/firstSetup_wifi endpoint, enabling remote attackers to execute arbitrary commands.
A command injection vulnerability exists in the Ziroom ZHOME A0101 1.0.1.0 API, allowing remote attackers to execute arbitrary commands via manipulation of the firstLogin argument.
A NestJS microservice can be crashed by sending a deeply nested object pattern through TCP or RabbitMQ transports, causing a RangeError that terminates the Node.js process due to unhandled promise rejection.
The vulnerability in Netcore POWER13 2.0.240730.162638 allows for weak password recovery, posing a significant security risk.