287 matches found
PT-2023-3918 · Oracle · Oracle Solaris
Name of the Vulnerable Software and Affected Versions: Oracle Solaris affected versions not specified Description: The issue is related to errors in processing input data in the Device Driver Interface component of the Oracle Solaris operating system. Exploitation of this issue may allow an...
PT-2023-4032 · Oracle · Oracle Agile Plm
Name of the Vulnerable Software and Affected Versions: Oracle Agile PLM version 9.3.6 Description: The issue is related to errors in processing input data in the WebClient component of Oracle Agile PLM. This can allow a remote attacker to gain read, modify, add, or delete access to data. Successf...
PT-2023-4051
Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 11.0.19, 17.0.7, 20.0.1 Oracle GraalVM Enterprise Edition versions 20.3.10, 21.3.6, 22.3.2 Oracle GraalVM for JDK versions 17.0.7, 20.0.1 Description The issue is related to errors in processing input data in the Utilit...
PT-2023-4055 · Mysql Server +7 · Mysql Server +7
Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.33 and prior Description: The issue is related to errors in processing input data in the MySQL Server product, specifically in the Server: DDL component. This can be exploited by a high-privileged attacker with netwo...
The vulnerability of the corporate VPN application GlobalProtect Agent, related to errors in processing input data, allows a hacker to execute arbitrary commands with elevated privileges.
The vulnerability of the corporate VPN application GlobalProtect Agent is related to errors in processing input data. Exploiting this vulnerability allows an attacker to execute arbitrary commands with elevated privileges...
The vulnerability of the Pragmatic General Multicast protocol implementation in Windows operating systems allows a hacker to execute arbitrary code by sending a specially crafted file.
The vulnerability of the Pragmatic General Multicast protocol implementation in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted file...
The vulnerability of the module responsible for checking embedded emails in the microprogramming-based email security gateway solution, Barracuda Email Security Gateway Appliance, allows a perpetrator to execute arbitrary code.
The vulnerability of the module responsible for checking the content of incoming emails in Barracuda Email Security Gateway Appliance relates to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
PT-2023-2848 · 1с · 1С-Битрикс
Name of the Vulnerable Software and Affected Versions: 1С-Битрикс: Управление сайтом affected versions not specified Description: The issue is related to errors in processing input data in the built-in code editor of the 1С-Битрикс: Управление сайтом content management system. Exploitation of thi...
Vulnerability of the Core component of the Oracle Solaris operating system, allowing a hacker to execute arbitrary code
The vulnerability of the Core component of the Oracle Solaris operating system is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Vulnerability of the Oracle Solaris operating system’s Libraries component, related to errors in processing input data
The vulnerability of the Oracle Solaris operating system’s Libraries component is related to errors in processing input data. Exploiting this vulnerability can allow a remote attacker to execute a DoS attack...
The vulnerability of the Core server component of Oracle WebLogic Server allows a perpetrator to gain access to protected information.
The vulnerability of the Core server component of Oracle WebLogic Server is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information from a remote location...
PT-2023-2660 · Oracle · Oracle Solaris
Name of the Vulnerable Software and Affected Versions: Oracle Solaris version 10 Description: The issue is related to errors in processing input data in the Core component of the Oracle Solaris operating system. Exploitation of this issue can allow an attacker to execute arbitrary code, potential...
The vulnerability of the microprogrammed software of Arris routers such as TG2482A, TG2492, and SBG10 allows a hacker to execute arbitrary code.
The vulnerability of the microprogrammed software of Arris routers such as TG2482A, TG2492, and SBG10 is related to errors in processing input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code by sending a specially crafted request...
SUSE CVE-2006-2480
Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a...
The vulnerability of the software for server-based web applications, LiteSpeed and OpenLiteSpeed, allows a perpetrator to execute arbitrary code.
The vulnerability of the LiteSpeed and OpenLiteSpeed web application server software relates to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the ImageMagick graphic editor lies in errors during the processing of input data, allowing attackers to gain access to protected information.
The vulnerability of the ImageMagick graphic editor is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain access to protected information using the “profile” parameter...
The vulnerability of the NAT library in Juniper Networks Junos operating systems for Juniper Networks SRX Series and MX Series devices allows a attacker to trigger a system failure and restart of the device.
The vulnerability of the NAT library in Juniper Networks’ Junos devices from the SRX Series and MX Series is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to trigger a system failure and restart the device...
The vulnerability of ManageEngine’s software products is related to errors in processing input data, which allow attackers to execute arbitrary code.
The vulnerability of ManageEngine’s software is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted SAML request remotely...
The vulnerability of the EndType parameter in the web interface of the POWER METER SICAM Q100 microprogramming system allows a hacker to disable the device (with subsequent automatic reboot) or execute arbitrary code.
The vulnerability of the EndType parameter in the web interface of the POWER METER SICAM Q100 measurement software is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to disable the device remotely, causing it to shut down automatically, or execute...
CVE-2022-46906
Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Reflected XSS...