360 matches found
The vulnerability of Shell Integration in the Google Chrome browser, related to insufficient validation of input data, allows attackers to execute external programs.
The vulnerability of Shell Integration in the Google Chrome browser is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute external programs using a specially created HTML page...
HYBBS Cross-Site Request Forgery Vulnerability
HYBBS is a lightweight community forum program. A cross-site request forgery vulnerability exists in the /?admin/user.html page in HYBBS version 2.2, which originates from a WEB application that does not adequately validate whether a request is from a trusted user. An attacker could exploit this...
The vulnerability of the coff_pointerize_aux function in the GNU Binutils development environment allows a hacker to trigger a service failure.
The vulnerability of the coffpointerizeaux function in the GNU Binutils development environment is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
CVE-2017-1200
IBM BigFix Compliance 1.7 through 1.9.91 TEMA SUAv1 SCA SCM does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle MITM attack. The software might connect to a malicious host while believing it is a...
The vulnerability of the MailConnect function in the software controller allows for an SSRF attack by the intruder, enabling them to carry out a malicious action. This vulnerability is present in the D-Link Central WiFi Manager, a device used for centralized control of wireless networks.
The vulnerability of the MailConnect function in the D-Link Central WiFi Manager software control panel exists due to insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...
VMware Workstation SVGA Heap-based Buffer Overflow Privilege Escalation Vulnerability
This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the guest system in order to exploit this vulnerability. The specific flaw exists within the handling ...
The vulnerability of the quickTemplateSelect.xhtml component of the HPE Intelligent Management Center PLAT software platform allows a perpetrator to execute arbitrary code.
The vulnerability of the quickTemplateSelect.xhtml component in the HPE Intelligent Management Center PLAT software platform is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using the beanName parameter...
Unbound < 1.6.8 Wildcard Synthesized NSEC Records Handling Remote Validation Weakness
According to its self-reported version number, the remote Unbound DNS resolver is affected by a validation weakness when handling wildcard synthesized NSEC records. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid106384; scriptversion"1.5"; scriptcvsdate"Date:...
The vulnerability in the Omnibox browser implementation of Google Chrome allows a hacker to replace the domain name.
The vulnerability of the Omnibox browser implementation by Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace a domain name using a specially crafted domain name that includes IDN Internationalized Domain Names...
nodejs ejs denial of service vulnerability
nodejs ejs is an embedded JavaScript template with flow control, customizable delimiters and escaped output. A security vulnerability exists in the 'ejs.renderFile' function in nodejs ejs versions prior to 2.5.5, which stems from weak input validation. An attacker can exploit the vulnerability to...
The vulnerability of the Mac OS X operating system’s file component, which allows a hacker to trigger a service failure
The vulnerability of the Mac OS X operating system’s file component exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the update mechanism for dynamic JAR files used in cloud service development tools like Context Service Software Development Kit allows a perpetrator to execute arbitrary code.
The vulnerability of the mechanism for updating dynamic JAR files used in cloud service development tools like Context Service Software Development Kit exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the...
The vulnerability of the Microsoft Office suite and Skype for Business messaging software allows a perpetrator to execute arbitrary code.
The vulnerability of the Microsoft Office suite and the Skype for Business messaging application exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted content...
The vulnerability of the org.springframework.core.serializer.DefaultDeserializer component in the Spring AMQP RabbitMQ messaging application, which allows an attacker to execute arbitrary code.
The vulnerability of the org.springframework.core.serializer.DefaultDeserializer component in the Spring AMQP RabbitMQ messaging application exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...
The vulnerability of the Windows operating system, which allows a hacker to bypass the certificate verification process
The vulnerability of the PowerShell script for the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a local attacker to bypass certificate verification...
The vulnerability of Google Chrome browser allows a perpetrator to bypass the certificate verification process.
The vulnerability of Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass certificate verification by using a specially created HTML page...
Unbound < 1.5.2 Upstream Server Trust Anchor Unspecified DNSSEC Validation Weakness
According to its self-reported version number, the remote Unbound DNS resolver is affected by an unspecified DNSSEC validation weakness that is triggered when an upstream server with different trust anchors introduces unsigned records in messages. C Tenable Network Security, Inc...
Kingsoft Defender Elevation of Privilege Vulnerability
Kingsoft Defender is a free security software with strong Trojan detection capability, fast vulnerability detection and compact size produced by Kingsoft Network Technology Co. The system service installed by Kingsoft Defender provides the function of creating high-privilege processes, but there...
qemu: virtio: insufficient validation of num_sg when mapping
The virtqueuemapsg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read...