8239 matches found
CVE-2023-20878
VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can execute arbitrary commands and disrupt the system...
The vulnerability of the OBVAM Trn Journal Domain sub-component of the Oracle Banking Virtual Account Management component of the banking analytics system’s simulation model, Oracle Financial Services Applications, allows a perpetrator to cause service failures or gain access to read, modify, add, or delete data.
The vulnerability of the OBVAM Trn Journal Domain component of the Oracle Banking Virtual Account Management banking analytics system’s simulation model relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures or gain access...
The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing allows a malicious individual to gain unauthorized access to the device or cause a partial service failure.
The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the device remotely, or cause a partial service...
The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing allows a malicious individual to cause service interruptions.
The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service interruptions...
VulnCheck KEV: CVE-2016-3427
Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions JMX. This vulnerability can be exploited through sandboxed Java Web Start applications and...
CVE-2023-28698
Wade Graphic Design FANTSY has a vulnerability of insufficient authorization check. An unauthenticated remote user can exploit this vulnerability by modifying URL parameters to gain administrator privileges to perform arbitrary system operation or disrupt service...
Rockwell Automation ArmorStart ST 跨站脚本漏洞
Rockwell Automation ArmorStart ST is a simple and cost-effective solution for machine-side control architectures from Rockwell Automation. A cross-site scripting vulnerability exists in Rockwell Automation ArmorStart ST, which can be exploited by an attacker to view user data and modify the web...
PT-2023-2836 · Rockwell Automation · Rockwell Automation Armorstart St
Name of the Vulnerable Software and Affected Versions: Rockwell Automation ArmorStart ST affected versions not specified Description: The issue is related to insufficient validation of user input data, which can lead to cross-site scripting XSS attacks. A malicious user with admin privileges and...
PT-2023-3141 · Rockwell Automation · Armorstart St
Name of the Vulnerable Software and Affected Versions: Rockwell Automation ArmorStart ST affected versions not specified Description: A cross-site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product. This issue could allow a malicious user to view and modify...
Rockwell Automation ArmorStart ST 跨站脚本漏洞
Rockwell Automation ArmorStart ST is a simple and cost-effective solution for machine-side control architectures from Rockwell Automation. A cross-site scripting vulnerability exists in Rockwell Automation ArmorStart ST, which can be exploited by an attacker to view user data and modify the web...
PT-2023-6787 · Google +2 · Google Chrome +2
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 114.0.5735.90 Description: The issue is related to a use after free in the PDF component, which could allow a remote attacker to potentially exploit heap corruption via a crafted PDF file. This could lead to...
Rockwell Automation ArmorStart ST 跨站脚本漏洞
Rockwell Automation ArmorStart ST is a simple and cost-effective solution for machine-side control architectures from Rockwell Automation. A cross-site scripting vulnerability exists in Rockwell Automation ArmorStart ST, which can be exploited by an attacker to view and modify sensitive data or...
Rockwell Automation ArmorStart ST 跨站脚本漏洞
Rockwell Automation ArmorStart ST is a simple and cost-effective solution for machine-side control architectures from Rockwell Automation. A cross-site scripting vulnerability exists in Rockwell Automation ArmorStart ST, which can be exploited by an attacker to view and modify sensitive data or...
The vulnerability of the command-line interface (CLI) of Zyxel NBG-418N v2 Wi-Fi router software allows a hacker to trigger a service failure.
The vulnerability of the command-line interface CLI of Zyxel NBG-418N v2 Wi-Fi router software involves copying buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
The vulnerability of the io_install_fixed_file() function in the io_uring subsystem of Linux kernels allows a malicious actor to escalate their privileges or cause service failures.
The vulnerability of the ioinstallfixedfile function in the iouring subsystem of Linux kernels relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service interruptions...
The vulnerability of the L2ALM component in Juniper Networks’ Junos OS-based QFX router series allows a hacker to induce a service failure.
The vulnerability of the L2ALM component Layer 2 Address Learning Manager in Juniper Networks’ Junos OS-based QFX series routers stems from the use of memory after it is freed due to synchronization errors when using shared resources. Exploiting this vulnerability can allow a malicious actor to...
The vulnerability of the Zyxel NBG-418N v2 Wi-Fi router’s microprogramming software, related to the use of uncontrolled format strings, allows a hacker to trigger a service failure.
The vulnerability of the microprogrammed Wi-Fi router Zyxel NBG-418N v2 lies in the use of uncontrolled format strings when processing binary files. Exploiting this vulnerability allows a remote attacker to cause service interruptions by sending specially crafted packets...
The vulnerability of the jfif_encode() function in the FFJPEG library for encoding and decoding JPEG files allows a attacker to cause a service failure.
The vulnerability of the jfifencode function ffjpeg/src/jfif.c in the library for encoding and decoding JPEG files allows for the copying of buffers without checking the size of the input data. Exploiting this vulnerability could enable a remote attacker to cause service interruptions...
PT-2023-21944 · Sap · Sap Businessobjects Business Intelligence Platform
Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform versions 420, 430 Description: The issue allows an authenticated attacker with administrator privileges to obtain the login token of any logged-in BI user over the network without any user...
Aruba Networks InstantOS 安全漏洞
Aruba Networks InstantOS is an Arch Linux-based distribution from Aruba Networks. A security vulnerability exists in Aruba InstantOS and ArubaOS 10 that stems from an unauthenticated Denial of Service DoS vulnerability in services accessed by the PAPI protocol, which can be exploited by an attack...