The vulnerability of the web interface of Netgear’s microprogrammed router software, models CBR40, CBK40, and CBK43, allows attackers to disclose protected information or cause service failures.

The vulnerability of the web interface of Netgear CBR40, Netgear CBK40, and Netgear CBK43 microprogrammed software routers is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to disclose protected information or cause service failures...

The vulnerability in the /krb5/src/lib/rpc/pmap_rmt.c component of the Kerberos network protocol allows a attacker to cause a service failure.

The vulnerability in the /krb5/src/lib/rpc/pmaprmt.c component of the Kerberos network protocol is related to memory release errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Vorbis-tools package, related to the ability to write beyond the buffer boundaries in memory, allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Vorbis-tools package lies in its ability to write beyond the buffer boundaries in memory during the conversion of WAV files into OGG files. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code...

The software of the centralized backup and disaster recovery management system of Dell PowerProtect Data Manager is vulnerable due to incorrect restrictions on XML references to external objects. This vulnerability allows attackers to gain unauthorized access to confidential data or cause service failures.

The vulnerability of the Dell PowerProtect Data Manager’s centralized backup and recovery software lies in improper restrictions on XML references to external objects. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data or cause service failures...

The vulnerability of the Apache Tomcat application server, related to insufficient input validation, allows attackers to cause service failures.

The vulnerability of the Apache Tomcat application server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures through specially crafted HTTP/2 requests...

The vulnerability of the `pic_parameter_set::dump()` function in the h.265 Libde265 implementation allows a attacker to disclose protected information or cause service failures.

The vulnerability of the picparameterset::dump function in the h.265 Libde265 implementation is related to buffer overflows caused by the parameters numtilecolumns and numtilerow. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information or cause service failures...

The vulnerability of the T.38 discanner, a traffic analysis tool for computer networks used by Wireshark, allows a hacker to cause a service failure.

The vulnerability of the T.38 discapper, a traffic analysis tool for computer networks developed by Wireshark, is related to unsynchronized memory management. Exploiting this vulnerability can allow an attacker to cause a service failure by sending a specially crafted file or packet...

The vulnerability of the PowerScale OneFS operating system, related to incorrect session duration, allows a attacker to trigger a service failure.

The vulnerability of the PowerScale OneFS operating system is related to incorrect session duration. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of IP packet processors in microsoftware for Cisco Aironet Access Points and the microsoftware for Cisco Wireless LAN Controllers (WLC) allows a attacker to cause service interruptions.

The vulnerability of IP packet processors in microsoftware for Cisco Aironet Access Points and the microsoftware for Cisco Wireless LAN Controllers WLC is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sendin...

The vulnerability of the fromSysToolRestoreSet() function (/goform/SysToolRestoreSet) in the Tenda AC15 router’s microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the fromSysToolRestoreSet function /goform/SysToolRestoreSet in the Tenda AC15 router’s microprogramming software is related to insufficient verification of the authenticity of executed requests. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2024-25958

Dell Grab for Windows, versions up to and including 5.0.4, contain Weak Application Folder Permissions vulnerability. A local authenticated attacker could potentially exploit this vulnerability, leading to privilege escalation, unauthorized access to application data, unauthorized modification of...

CVE-2024-25958

Dell Grab for Windows, versions up to and including 5.0.4, contain Weak Application Folder Permissions vulnerability. A local authenticated attacker could potentially exploit this vulnerability, leading to privilege escalation, unauthorized access to application data, unauthorized modification of...

CVE-2024-25958

Dell Grab for Windows, versions up to and including 5.0.4, contain Weak Application Folder Permissions vulnerability. A local authenticated attacker could potentially exploit this vulnerability, leading to privilege escalation, unauthorized access to application data, unauthorized modification of...

CVE-2024-25958

Dell Grab for Windows (up to 5.0.4) contains a Weak Application Folder Permissions vulnerability that can be exploited by a local authenticated attacker to achieve privilege escalation, access/modify application data, and potentially disrupt services. Root cause is improper folder permissions wit...

CVE-2024-25958

Dell Grab for Windows, versions up to and including 5.0.4, contain Weak Application Folder Permissions vulnerability. A local authenticated attacker could potentially exploit this vulnerability, leading to privilege escalation, unauthorized access to application data, unauthorized modification of...

PT-2024-21242 · Dell · Dell Grab For Windows

Name of the Vulnerable Software and Affected Versions: Dell Grab for Windows versions up to and including 5.0.4 Description: The issue allows a local authenticated attacker to potentially exploit Weak Application Folder Permissions, leading to privilege escalation, unauthorized access to...

Dell Grab 安全漏洞

Dell Grab is a configuration technology from Dell, Inc. It is used to collect data on hosts connected to Dell EMC storage devices. A security vulnerability exists in Dell Grab 5.0.4 and prior versions, which stems from a vulnerability in application folder permissions that could be exploited by a...

The vulnerability of the Nokogiri library in the Ruby interpreter allows a hacker to disclose protected information or cause service failures.

The vulnerability of the Nokogiri library in the Ruby interpreter is related to improper handling of unexpected data types. Exploiting this vulnerability can allow an attacker to disclose protected information or cause service failures...

The vulnerability of the TDDP protocol used for debugging TP-LINK network devices stems from the possibility of buffer overflows, which allows attackers to cause service failures.

The vulnerability of the TDDP protocol used for debugging TP-LINK network devices is related to the possibility of buffer overflows. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially crafted UDP packets...

The vulnerability in the implementation of the QUIC network protocol on Windows operating systems allows a attacker to cause a service failure.

The vulnerability of the QUIC network protocol implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using specially created data...