13382 matches found
389 Directory Server Content Synchronization DoS
The vulnerability of the Content Synchronization plugin in the 389 Directory Server service is related to pointer assignment errors. Exploiting this vulnerability could allow a malicious actor to cause service failures through a specially crafted request...
Firefox Type Conversion Confidential Data Compromise
The vulnerability in the Firefox web browser is related to type conversion errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
OpenImageIO DoS
The vulnerability of the OpenImageIO image processing library is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure through the use of a specially created file...
ESET Privilege Escalation
The vulnerability of the user interface of ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, ESET Endpoint Antivirus, ESET Endpoint Security, ESET Server Security for Microsoft Windows Server, ESET File Security for Microsoft Windows Server, ESET Mail Security for Microso...
LDAP Windows Code Execution
The vulnerability of the LDAP protocol implementation on the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Windows HTML Platform Bypass
The vulnerability of the Windows HTML Platform component of the Windows operating system is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
Projected File System Privilege Escalation
The vulnerability of the Projected File System component in the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
ADFS Bypass Security Restrictions
The vulnerability of the Active Directory Federation Services ADFS for Windows operating systems is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...
HTML injection vulnerability in fortify
fortify 22.1.38 and earlier does not escape the error message for a form validation method. This results in an HTML injection vulnerability. NOTE: Since Jenkins 2.275 and LTS 2.263.2, a security hardening for form validation responses prevents JavaScript execution, so no scripts can be injected...
Microsoft Edge Security Configuration Error
The vulnerability of Microsoft Edge is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...
libxml2: NULL dereference in xmlSchemaFixupComplexType
A NULL pointer dereference vulnerability was found in libxml2. This issue occurs when parsing invalid XML schemas...
libxml2: Hashing of empty dict strings isn't deterministic
A flaw was found in libxml2. This issue occurs when hashing empty strings which aren't null-terminated, xmlDictComputeFastKey could produce inconsistent results, which may lead to various logic or memory errors, including double free errors...
Denial Of Service (DoS)
libbind9.so is vulnerable to Denial Of Service DoS. The vulnerability exists when debug logging is turned on, due to assertion errors in renderecs which allows an attacker to cause an application crash...
Business Logic Errors
froxlor/froxlor is vulnerable to Business Logic Errors. The vulnerability exists in the update function pf Admins.php because the admin name is not properly validated for spaces which allows an attacker to save a user name with just spaces/...
OpenBSD Buffer Overflow Vulnerability (CNVD-2026-26534)
OpenBSD is a cross-platform, BSD-based UNIX-like operating system developed by the OpenBSD project in Canada. Versions of OpenBSD prior to 7.3 contained a buffer error vulnerability, which stemmed from the lack of boundary checks on parameter counting. Attackers can exploit this vulnerability to...
Google Android Security Vulnerability
Google Android is a Linux-based open source operating system from the American company Google. Google Android suffers from a security vulnerability that stems from the existence of logic errors in the code at multiple locations, with a possible way to mask the microphone privacy indicator...
Google Chrome Cast UI Spoofing
The vulnerability of Google Chrome’s Cast UI interface is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks using a specially crafted HTML page...
ScienceLogic SL1 SQL Injection Vulnerability (CNVD-2023-66409)
ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...
