Windows DWM Core Library Privilege Escalation

The vulnerability of the Windows DWM Core Library in operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

CVE-2022-0746: Undefined Security Weakness

Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...

Windows Print Spooler Privilege Escalation

The vulnerability of the Windows Print Spooler in operating systems related to the print queue is associated with security configuration errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

Windows Common Log File System Driver Privilege Escalation

The vulnerability of the Windows Common Log File System Driver in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

Microsoft Dynamics GP Information Presentation Error

The vulnerability of the software package for accounting or resource planning of Microsoft Dynamics GP involves information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

Microsoft SharePoint Server Spoofing

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Server Subscription Edition packages is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform a...

Microsoft Edge Information Disclosure

The vulnerability of Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform spear-phishing attacks remotely...

Azure Data Explorer Spear Phishing

The vulnerability of the Azure Data Explorer data analysis service is related to errors in information representation by the user interface. Exploiting this vulnerability may allow attackers to perform spear-phishing attacks remotely...

Microsoft Edge Information Disclosure

The vulnerability of Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform spear-phishing attacks remotely...

EulerOS 2.0 SP10 : kernel (EulerOS-SA-2022-1227)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with...

Business Logic Errors

Description Product status of product is unpublished has been deleted by admin in Trash folder but user can still add to cart and make purchases Proof of Concept Step 1: Admin go to Shop Products: Unpublish product and Delete product Step 2: User add product to cart by request POST...

EulerOS 2.0 SP3 : kernel (EulerOS-SA-2022-1171)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In the nl80211policy policy of nl80211.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local...

PT-2022-37947

Уязвимость функции sec aead soft crypto модуля drivers/crypto/hisilicon/sec2/sec crypto.c драйвера криптографического ускорителя ядра операционной системы Linux связана с ошибками обработки памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

python-pillow: buffer over-read during initialization of ImagePath.Path in path_getbbox() in path.c

A flaw was found in python-pillow. The vulnerability occurs due to improper initialization of image paths, leading to a buffer over-read and improper initialization. This flaw allows an attacker to unauthorized memory access that causes memory access errors, incorrect results, or crashes...

Istio authorization issue vulnerabilities

Istio is an open platform for connecting, managing and securing microservices. Istio suffers from an authorization issue vulnerability that stems from the Istio control plane "istiod" being susceptible to request processing errors in the affected version. An attacker could use this vulnerability ...

Mozilla Firefox Code Execution

The vulnerability of the Mozilla Firefox browser is related to errors in processing HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

D-Link DIR-X1860 DoS

The vulnerability of the web-based application of D-Link DIR-X1860 wireless routers is related to resource release errors. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially created web page...

Zabbix Authentication Code Execution Root Privileges

The vulnerability of the Zabbix universal monitoring system is related to authentication errors. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands with root privileges...

node-request-retry Information Leak Vulnerability

node-request-retry is a method of automatically retrying a request when a connection fails with an ECONNRESET, ENOTFOUND, ESOCKETTIMEDOUT, ETIMEDOUT, ECONNREFUSED, EHOSTUNREACH, one of EPIPE, EAIAGAIN, or when an HTTP 5xx or 429 errors, the request will be automatically retried, as these are...

ROS-20220217-01

MariaDB database management system vulnerability, related to a formatted string error in the in the implementation of the CONNECT function. Exploitation of the vulnerability could allow an attacker acting remotely, send a specially crafted SQL query containing format string specifiers and execute...