Microsoft Office Graphics Package Code Execution

The vulnerability of the Microsoft Office Graphics Package components in Microsoft Office products is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Remote Procedure Call Windows DoS

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

PT-2023-4008

Name of the Vulnerable Software and Affected Versions Rockwell Automation PowerMonitor 1000 affected versions not specified Description The issue is related to stored cross-site scripting vulnerabilities within the web page of the product. The vulnerable pages do not require privileges to access...

Rockwell Automation ArmorStart ST XSS

The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart ST distributed controllers is related to deficiencies in the validation of user-input data. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting XSS attacks remotely...

Linux kernel udmabuf_vm_fault Privilege Escalation

The vulnerability of the udmabufvmfault function in the drivers/dma-buf/udmabuf.c module of Linux operating systems is related to unvalidated array indexing due to incorrect data validation. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

SSTP DoS

The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Secure Channel Windows DoS

The vulnerability of the Secure Channel component in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Network Address Translation DoS

The vulnerability of the Network Address Translation NAT technology implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using specially created data...

Microsoft Office Code Execution

The vulnerability of the Microsoft Office package is related to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Microsoft Visual Studio Code Execution

The vulnerability of the Microsoft Visual Studio software development tool is related to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Cisco IOS XE DoS

The vulnerability of the HTTP-based client profiling function in Cisco IOS XE exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

IBM DB2 DoS

The vulnerability of the IBM DB2 database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure by executing the Load command...

Tenda AC1206 Router Arbitrary Command Execution

The vulnerability of the formWriteFacMac function in the Tenda AC1206 router microprogramming system is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow an attacker operating remotely to execute arbitrary commands...

Windows Media Foundation Code Execution

The vulnerability of the Windows Media Foundation component in Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Excel Office 365 Code Execution

The vulnerability of Microsoft Excel, Office, and Office 365 packages is related to insufficient validation of input data. Exploiting this vulnerability allows attackers to execute arbitrary code using a specially created file...

Windows IKE DoS

The vulnerability of the Internet Key Exchange IKE protocol implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

DNS Server Windows DoS

The vulnerability of the DNS Server component for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to execute a DoS attack...

Adobe Photoshop Code Execution

The vulnerability of the Adobe Photoshop graphic editor is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Dell BIOS Code Execution

The vulnerability of BIOS microprogramming software in Dell laptops is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Dell BIOS Code Execution

The vulnerability of the BIOS software on Dell laptops and workstations exists due to insufficient testing of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...