11784 matches found
The vulnerability of the eDocLib platform for storing and processing corporate data lies in the absence of a user-friendly error page, which allows attackers to disclose the protected information.
The vulnerability of the eDocLib platform for storing and processing corporate data exists due to an error in the application configuration, which results in the absence of a user-friendly error page. Exploiting this vulnerability allows a malicious actor to disclose system-sensitive information ...
The vulnerability of the application control tool: Windows Defender Application Control (WDAC), a PowerShell Core-based automation tool for application management, allows attackers to bypass the PowerShell Core Constrained Language Mode and compromise the integrity, confidentiality, and accessibility of protected information.
The vulnerability of the application control tool, Windows Defender Application Control WDAC, a PowerShell Core-based automation tool, is related to security configuration errors. Exploiting this vulnerability can allow attackers to bypass PowerShell Core’s Constrained Language Mode and compromis...
The vulnerability of the splwow64.exe process in the Windows operating system, which allows attackers to escalate their privileges
The vulnerability of the splwow64.exe process in Windows operating systems is related to call processing errors. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the Internet Explorer browser’s script handler allows a hacker to execute arbitrary code.
The vulnerability of the Internet Explorer browser’s script handler exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...
The vulnerability of the DirectWrite programming interface in Windows operating systems allows attackers to disclose sensitive information.
The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
Cross site scripting
Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering parsing errors. This allows malicious code to then be processed, evading cross-site scripting XSS filtering. This vulnerability affects Firefox 68...
CVE-2019-11720
Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering parsing errors. This allows malicious code to then be processed, evading cross-site scripting XSS filtering. This vulnerability affects Firefox 68...
The vulnerability of the DirectWrite programming interface in the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the DirectWrite programming interface in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created web page or document...
The vulnerability of the __strlen_sse2_pminub function in the infotocap utility from the ncurses-bin package allows a hacker to cause a service failure.
The vulnerability of the strlensse2pminub function located in the file sysdeps/x8664/multiarch/strlen-sse2-pminub.S:39 in the infotocap utility from the ncurses-bin package is related to errors in pointer arithmetic. Exploiting this vulnerability could allow an attacker to cause a system failure ...
The vulnerability of the Windows operating system, related to privilege management errors, allows a perpetrator to escalate their privileges.
The vulnerability of the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of the Microsoft Common Object Runtime Library on the Microsoft .NET Framework software platform allows a perpetrator to cause a service failure.
The vulnerability of the Microsoft Common Object Runtime Library in the Microsoft .NET Framework is related to errors in handling web requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted requests...
The vulnerability in the web-based management interfaces of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers allows a attacker to cause service interruptions.
The vulnerability in the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router web management interfaces is related to authentication process errors. Exploiting this vulnerability can allow an attacker to disable clients...
The vulnerability of the Windows Audio service on the Windows operating system allows a perpetrator to execute arbitrary code with elevated privileges.
The vulnerability of the Windows Audio service in the Windows operating system is related to privilege management errors. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges through a specially created application...
The vulnerability of the Windows Audio service on the Windows operating system allows a perpetrator to execute arbitrary code with elevated privileges.
The vulnerability of the Windows Audio service in the Windows operating system is related to privilege management errors. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges through a specially created application...
The vulnerability in the web-based management interfaces of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers allows a attacker to access a list of devices connected to the network.
The vulnerability in the web-based management interfaces of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers is related to authentication process errors. Exploiting this vulnerability can allow an attacker to gain...
The vulnerability of the nettle-hash cryptographic hash function’s implementation, caused by segmentation errors, allows a hacker to trigger a service failure.
The vulnerability of the nettle-hash cryptographic hash function lies in segmentation errors. Exploiting this vulnerability could allow an attacker to cause a service failure in an application by entering a specially crafted sequence of data into the command line...
The vulnerability of the connection tool to scanners using the parallel port umax_pp, related to segmentation errors, allows a intruder to cause a service failure.
The vulnerability of the connection utility to scanners using the parallel port umaxpp is related to segmentation errors. Exploiting this vulnerability can allow a perpetrator to cause a service failure in the application by entering a specially crafted sequence of data into the command line...
The vulnerability of the gtbl document editing tool from the groff package, related to errors in pointer arithmetic, allows a perpetrator to trigger a service failure.
The vulnerability of the gtbl document editing tool from the groff package is related to errors in pointer manipulation at address 0x0000000000409400. Exploiting this vulnerability could allow an attacker to cause a service failure by passing a specially crafted file as an argument to the command...
The vulnerability of the data tracking utility’s peekfd function, caused by segmentation errors, allows a hacker to trigger a service failure.
The vulnerability of the data tracking utility’s peekfd function is caused by segmentation errors. Exploiting this vulnerability can allow an attacker to cause a service failure in the application by entering a specially crafted sequence of data in the command line...
The vulnerability of the wlansvc.dll library in the Windows operating system allows a hacker to execute arbitrary code with elevated privileges.
The vulnerability of the wlansvc.dll library in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using a specially created application...