The vulnerability of microprogrammed software in Huawei CloudEngine 12800, CloudEngine 5800, CloudEngine 6800, and CloudEngine 7800 stems from deficiencies in access control mechanisms, allowing attackers to exploit these vulnerabilities to gain increased privileges.

The vulnerability of microprogrammed software in Huawei CloudEngine 12800, CloudEngine 5800, CloudEngine 6800, and CloudEngine 7800 stems from deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.

The vulnerability of Windows operating system kernels is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2022-1687 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to a security feature bypass vulnerability in Microsoft SharePoint Server, which is associated with deficiencies in the authentication procedure. Th...

CVE-2021-30314

Lack of validation for third party application accessing the service can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

The vulnerability of NETGEAR D7000 Wi-Fi routers’ microprogramming software, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of NETGEAR D7000 Wi-Fi routers’ microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

The vulnerability of NETGEAR D7000 Wi-Fi routers’ microprogramming software, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of NETGEAR D7000 Wi-Fi routers’ microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

github-readme-stats 跨站脚本漏洞

github-readme-stats is an open source project. github-readme-stats suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by WEB applications, which can be exploited by attackers to execute client-side code...

The vulnerability of the microprogrammed Ethernet module WISE-4060 and Adam-6050 D lies in the lack of authentication procedures, allowing attackers to gain full access to the device with administrator privileges.

The vulnerability of the microprogrammed Ethernet module WISE-4060 and Adam-6050 D lies in the deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain full access to the device with administrator privileges using a specially crafted package...

The vulnerability of the Advanced Networking Option component of the Oracle Database Server allows a attacker to execute a “man-in-the-middle” attack and gain full control over the system.

The vulnerability of the Advanced Networking Option component of the Oracle Database Server management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack and gain full control over...

The vulnerability of Mali graphics processor drivers based on Midgard, Bifrost, and Valhall architectures lies in their lack of access control mechanisms. This allows attackers to escalate their privileges, gain unauthorized access to protected information, or cause service failures.

The vulnerability of Mali graphics processor drivers based on Midgard, Bifrost, and Valhall architectures is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to enhance their privileges, gain unauthorized access to protected information, or caus...

The vulnerability of the McAfee Total Protection (MTP) antivirus protection system lies in its lack of access control mechanisms, allowing attackers to execute arbitrary codes or escalate their privileges.

The vulnerability of the McAfee Total Protection MTP antivirus protection system is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary code or increase their privileges...

The vulnerability in the web interface of the microprogramming software for Cisco Analog Telephone Adapter (ATA) model 190 allows a perpetrator to cause a service failure.

The vulnerability of the web interface of the microprogramming software for Cisco Analog Telephone Adapter ATA series 190 devices is related to deficiencies in rate-limiting mechanisms when sending ICMP packets. Exploiting this vulnerability could allow a malicious actor to cause service...

The vulnerability of microprogrammed software in programmable logic controllers like ioLogik, related to deficiencies in access control, allows a intruder to gain access to the device.

The vulnerability of microprogrammed software in programmable logic controllers like ioLogik is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder to gain access to the device...

The vulnerability of Yokogawa’s software products stems from lack of access control mechanisms. This allows attackers to generate false system or technological alarm signals, or block existing alarm signals.

The vulnerability of Yokogawa’s software products is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to generate false system or technological alarm signals, or block existing alarm signals...

Cross-site Scripting (XSS)

graphql-playground-react is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in Properties.html allowing an attacker to inject and execute malicious javascript...

The vulnerability of the Library component of the Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows attackers to modify data.

The vulnerability of the Library component of the Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete...

The vulnerability of the Apache Druid analytical database, related to deficiencies in authentication mechanisms, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Apache Druid analytical database is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Windows Event Tracing service allows attackers to exploit their privileges.

The vulnerability of the Windows Event Tracing service in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the RTU module’s microprogramming software, Modicon BMXNOR0200H, due to lack of access control mechanisms, allows intruders to gain increased privileges.

The vulnerability of the RTU module’s microprogramming software, Modicon BMXNOR0200H, is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker operating remotely to enhance their privileges...

The vulnerability of Azure Sphere operating systems, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of Azure Sphere operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...