VulDB Recent Entries

A vulnerability was found in ESRI ArcGIS Server 10.9.1/11.1/11.2/11.3 and classified as problematic. This issue affects some unknown processing of the component Link Handler. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-51959. The attack may be initiated remotely. There is no exploit available.

A vulnerability has been found in ESRI ArcGIS Server 10.9.1/11.1/11.2/11.3 and classified as problematic. This vulnerability affects unknown code of the component Link Handler. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-51957. The attack can be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in ESRI ArcGIS Server 10.9.1/11.1/11.2/11.3. This affects an unknown part of the component Link Handler. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-51949. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in ESRI ArcGIS Server 10.9.1/11.1/11.2/11.3. Affected by this issue is some unknown functionality of the component Link Handler. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-5888. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as problematic was found in ESRI ArcGIS Server 10.9.1/11.1/11.2/11.3. Affected by this vulnerability is an unknown functionality of the component Link Handler. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-51950. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in ESRI ArcGIS Server 10.9.1/11.1/11.2/11.3. It has been rated as problematic. This issue affects some unknown processing of the component Link Handler. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-51948. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as problematic has been found in ESRI ArcGIS Server 10.9.1/11.1/11.2/11.3. Affected is an unknown function of the component Link Handler. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-51942. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in ESRI ArcGIS Server 10.9.1/11.1/11.2/11.3. It has been classified as problematic. This affects an unknown part of the component Link Handler. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-10904. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in ESRI ArcGIS Server 10.9.1/11.1/11.2/11.3. It has been declared as problematic. This vulnerability affects unknown code of the component Link Handler. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-51945. The attack can be initiated remotely. There is no exploit available.

A vulnerability has been found in ESRI ArcGIS Server 10.9.1/11.1/11.2/11.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Link Handler. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-51947. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in ESRI ArcGIS Server 10.9.1/11.1/11.2/11.3 and classified as problematic. Affected by this issue is some unknown functionality of the component Link Handler. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-51946. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in ESRI ArcGIS Server 10.9.1/11.1/11.2/11.3. Affected is an unknown function of the component Link Handler. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-51944. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in openziti ziti-console up to 3.7.0. This issue affects some unknown processing. The manipulation leads to server-side request forgery. The identification of this vulnerability is CVE-2025-27501. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in openziti ziti-console up to 3.7.0. This vulnerability affects unknown code of the file /api/upload. The manipulation leads to cross site scripting. This vulnerability was named CVE-2025-27500. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in OpenHarmony up to 5.0.2. This affects an unknown part of the component Pre-installed Apps. The manipulation leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2025-22835. It is possible to launch the attack on the local host. There is no exploit available.

A vulnerability was found in OpenHarmony up to 5.0.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Pre-installed Apps. The manipulation leads to null pointer dereference. This vulnerability is handled as CVE-2025-21084. Attacking locally is a requirement. There is no exploit available.

A vulnerability was found in OpenHarmony up to 5.0.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Pre-installed Apps. The manipulation leads to use after free. This vulnerability is known as CVE-2025-20626. Local access is required to approach this attack. There is no exploit available.

A vulnerability was found in OpenHarmony up to 5.0.2. It has been classified as problematic. Affected is an unknown function of the component Pre-installed Apps. The manipulation leads to use after free. This vulnerability is traded as CVE-2025-20091. An attack has to be approached locally. There is no exploit available.

A vulnerability was found in OpenHarmony up to 5.0.2 and classified as problematic. This issue affects some unknown processing of the component Pre-installed Apps. The manipulation leads to use after free. The identification of this vulnerability is CVE-2025-20081. The attack needs to be approached locally. There is no exploit available.

A vulnerability has been found in OpenHarmony up to 5.0.2 and classified as problematic. This vulnerability affects unknown code of the component Pre-installed Apps. The manipulation leads to integer overflow. This vulnerability was named CVE-2025-20024. It is possible to launch the attack on the local host. There is no exploit available.