11696 matches found
The vulnerability of the Content Synchronization plugin of the 389 Directory Server server allows a attacker to cause a service failure.
The vulnerability of the Content Synchronization plugin in the 389 Directory Server service is related to pointer assignment errors. Exploiting this vulnerability could allow a malicious actor to cause service failures through a specially crafted request...
The vulnerability of the OpenImageIO image processing library, related to pointer dereferencing errors, allows a hacker to cause a service failure.
The vulnerability of the OpenImageIO image processing library is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created DDS file...
The vulnerability of the utfc_ptr2len function in the mbyte.c text editor Vim allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the utfcptr2len function in the mbyte.c text editor Vim is related to pointer assignment errors. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause service interruptions...
The vulnerability of the user interface of ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, ESET Endpoint Antivirus, ESET Endpoint Security, ESET Server Security for Microsoft Windows Server, ESET File Security for Microsoft Windows Server, ESET Mail Security for Microsoft Exchange Server, ESET Mail Security for IBM Domino, and ESET Security for Microsoft SharePoint Server allows attackers to increase their privileges.
The vulnerability of the user interface of ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, ESET Endpoint Antivirus, ESET Endpoint Security, ESET Server Security for Microsoft Windows Server, ESET File Security for Microsoft Windows Server, ESET Mail Security for Microso...
The vulnerability of the Projected File System component in the Windows operating system, which allows attackers to enhance their privileges
The vulnerability of the Projected File System component in the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a hacker to bypass existing security restrictions.
The vulnerability of the Active Directory Federation Services ADFS for Windows operating systems is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...
The vulnerability of the Windows HTML Platform component of the Windows operating system allows attackers to circumvent existing security restrictions.
The vulnerability of the Windows HTML Platform component of the Windows operating system is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
The vulnerability in the implementation of the Lightweight Directory Access Protocol (LDAP) on the Windows operating system allows a perpetrator to execute arbitrary code.
The vulnerability of the LDAP protocol implementation on the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Microsoft Edge’s vulnerability, related to security configuration errors, allows attackers to circumvent existing security restrictions.
The vulnerability of Microsoft Edge is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...
libxml2: Hashing of empty dict strings isn't deterministic
A flaw was found in libxml2. This issue occurs when hashing empty strings which aren't null-terminated, xmlDictComputeFastKey could produce inconsistent results, which may lead to various logic or memory errors, including double free errors...
libxml2: NULL dereference in xmlSchemaFixupComplexType
A NULL pointer dereference vulnerability was found in libxml2. This issue occurs when parsing invalid XML schemas...
Denial Of Service (DoS)
libbind9.so is vulnerable to Denial Of Service DoS. The vulnerability exists when debug logging is turned on, due to assertion errors in renderecs which allows an attacker to cause an application crash...
Business Logic Errors
froxlor/froxlor is vulnerable to Business Logic Errors. The vulnerability exists in the update function pf Admins.php because the admin name is not properly validated for spaces which allows an attacker to save a user name with just spaces/...
OpenBSD Buffer Overflow Vulnerability (CNVD-2026-26534)
OpenBSD is a cross-platform, BSD-based UNIX-like operating system developed by the OpenBSD project in Canada. Versions of OpenBSD prior to 7.3 contained a buffer error vulnerability, which stemmed from the lack of boundary checks on parameter counting. Attackers can exploit this vulnerability to...
The vulnerability of Google Chrome’s Cast UI interface allows a hacker to perform spoofing attacks.
The vulnerability of Google Chrome’s Cast UI interface is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks using a specially crafted HTML page...
Google Android Security Vulnerability
Google Android is a Linux-based open source operating system from the American company Google. Google Android suffers from a security vulnerability that stems from the existence of logic errors in the code at multiple locations, with a possible way to mask the microphone privacy indicator...
ScienceLogic SL1 SQL Injection Vulnerability (CNVD-2023-66409)
ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...
GHSA-9RMF-6QGJ-G3WJ Froxlor vulnerable to business logic errors
Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22...
