Cisco Prime Collaboration Provisioning Access Privilege

The vulnerability of the Cisco Prime Collaboration Provisioning software installation component for centralized product management involves the use of pre-installed user accounts. Exploiting this vulnerability could allow an attacker to gain access to the administrative web interface with...

Metabase Query Privilege Escalation

The vulnerability of the Metabase data visualization and reporting software relates to the lack of measures taken to protect the SQL query structure during the processing of the resetpassword parameter. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute...

Oracle WebLogic Server Data Compromise

The vulnerability of the Oracle WebLogic Server application server’s kernel is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information using the SAML protoc...

Windows Graphics Component Code Execution

The vulnerability of the Windows Graphics Component in Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

MongoDB Information Disclosure

The vulnerability of the MongoDB database management system is related to the exposure of confidential information in the log files. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information...

Renesas Electronics RH850/F1L Voltage Spike Access

The vulnerability of the Renesas Electronics RH850/F1L microcontroller is related to improper protection against voltage spikes and clock frequency fluctuations. Exploiting this vulnerability can allow an attacker to gain access to the protected information...

HarmonyOS PDF Preview DoS

The vulnerability of the PDF Preview module in the HarmonyOS operating system is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

TOTOLINK N150RT Router Code Execution

The vulnerability of the /boafrm/formVlan function in TOTOLINK N150RT router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Tenda AC7 Router FormSetFirewallCfg Code Execution

The vulnerability of the formSetFirewallCfg function in the web interface of the Tenda AC7 router’s microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted POST reque...

Intel System Resources Defense Privilege Escalation

The vulnerability of Intel System Resources Defense and Intel System Security software related to Intel microprocessors involves executing operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

Microsoft Office Code Execution

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the use of an untrusted pointer. Exploiting this vulnerability can allow attackers to execute arbitrary code...

Resilient File System Deduplication Service Privilege Escalation

The vulnerability of the Resilient File System ReFS Deduplication Service in Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Kernel Streaming WOW Thunk Service Driver Privilege Escalation

The vulnerability of the Kernel Streaming WOW Thunk Service Driver ksthunk.sys in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Laravel Information Disclosure

The vulnerability of the PHP framework Laravel is related to insufficient protection of sensitive data during the processing of the laravel.log file storage/logs/laravel.log. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

LayerSlider Plugin SQL Injection

The vulnerability of the lsgetpopupmarkup function in the assets/wp/actions.php script of the LayerSlider plugin for the WordPress content management system is related to the lack of protection for the SQL query structure when processing the id parameter. Exploiting this vulnerability allows an...

Intel Integrated Sensor Hub Driver Privilege Escalation

The vulnerability of the Intel Integrated Sensor Hub driver for NUC P14E Laptop Element notebooks is related to the default access settings. Exploiting this vulnerability can allow attackers to gain increased privileges...

DedeCMS dialog/select_media.php File Read

The vulnerability of the dialog/selectmedia.php implementation in the DedeCMS content management system is related to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to read arbitrary files...

Juniper Networks Junos OS IP/MPLS DoS

The vulnerability of the IP/MPLS protocol implementation in Juniper Networks’ Junos OS-based QFX10000 routers stems from improper validation of certain indices, positions, or offsets in the input data. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending...

Acti9 PowerTag Link C Privilege Escalation

The vulnerability of the microprogramming software of the Acti9 PowerTag Link C communication module is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

NETGEAR D7000 Wi-Fi Router Privilege Escalation

The vulnerability of NETGEAR D7000 Wi-Fi routers’ microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

Junos Buffer Overflow Kernel Shutdown

The vulnerability of the Junos operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause a failure in the kernel’s memory dump process due to receiving an incorrect DHCPv6 packet...

VMware vCenter Server Auth Bypass

The vulnerability of the management tool for virtual infrastructure, VMware vCenter Server, is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to user registration data...

Marketing Administration Oracle Marketing E-Business Suite Privilege Escalation

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, or to gain unauthorized...

Debian GNU/Linux Remote Compromise Protected Information

The multiple vulnerabilities in the linux-headers-2.6.18-6-all-powerpc package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Remote Compromise Protected Information

The multiple vulnerabilities in the linux-headers-2.6.26-2-686-bigmem package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

OpenSUSE Data Compromise

The multiple vulnerabilities in the cloop operating system package of OpenSUSE can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

vvdecapp reconstructCoeff Memory Use After Free

The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...

Telecom MG Code Execution

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

IntelliJ IDEA Information Disclosure

The vulnerability of the IntelliJ IDEA integrated development environment is related to the transfer of critical information in open text. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

TOTOLINK X15 Router DoS

The vulnerability of the built-in server boa /boafrm/formMapDel of the TOTOLINK X15 router microprogramming software is related to the issue of the operation exceeding the buffer boundaries in memory when processing the parameter devicemac1. Exploiting this vulnerability allows a remote attacker ...

CKEditor GHS XSS

The vulnerability of the General HTML Support function and the HTML embed panel in the Block Toolbar WYSIWYG-editor CKEditor is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability may allow a malicious actor to carry out XSS attacks remotely...

Linux Kernel Farch Buffer Overflow DoS

Vulnerability of the efxfarchhandletxevent function in the drivers/net/ethernet/sfc/farch.c module – The Linux kernel’s Ethernet network adapter support driver is vulnerable due to the use of a NULL pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a system...

SAML SSO Library Authentication Bypass

The vulnerability of the SAML SSO library in Ruby SAML and the Git-based software platform for collaborative code development on GitLab CE/EE is related to errors in cryptographic signature verification. Exploiting this vulnerability could allow an attacker to bypass authentication processes...

TP-Link TL-WR940N Root Code Execution

The vulnerability of the dnsserver1 and dnsserver2 parameter handlers in the TP-Link TL-WR940N router software lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root...

Red Hat 3scale API Management Auth Bypass

The vulnerability of the Red Hat 3scale API Management software lies in the deficiencies of its authentication mechanism. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...

Pug Template Code Execution

The vulnerability of the compileClient, compileFileClient, and compileClientWithDependenciesTracked functions of the Pug template for generating HTML markup formerly Jade is related to improper code generation control. Exploiting this vulnerability could allow a remote attacker to execute arbitra...

Gradle Quarkus Plugin Disclosure

The vulnerability of the Gradle plugin for the Quarkus Java framework is related to the disclosure of information through environment variables. Exploiting this vulnerability allows an attacker to disclose the protected information...

5G MediaTek Wireless Communication Module DoS

The vulnerability of 5G wireless communication modules by MediaTek is related to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

D-Link Administrator Console Command Execution

The vulnerability of the administrator consoles of microprogrammed software for D-Link DCH-M225 wireless signal amplifiers is related to the lack of measures taken to neutralize special elements used in the operating system’s command processing when handling the “media renderer” parameter in the...

Advantech R-SeeNet Router XSS

The vulnerability of the firmfilter parameter in the “devicelist” component of the Advantech R-SeeNet monitoring software relates to the improper handling of the firmfilter parameter. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks by sending special...

Apache Tika Heap Buffer Overflow DoS

The vulnerability of the Apache Tika content detection and analysis engine lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

VLC MP4_ReadBox_rdrf Buffer Overflow DoS

The vulnerability of the MP4ReadBoxrdrf function in the VideoLAN VLC media player’s libmp4.c file is related to numerical processing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

libhevc DoS

The vulnerability of the libhevc library in the Media Framework of the Android operating system is related to insufficient state checking. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Qualcomm TrustZone Privilege Escalation

The vulnerability of the TrustZone technology a DRM sub-program of Qualcomm’s Secure Execution Environment for Android from the CAF repository is related to numerical processing errors. Exploiting this vulnerability could allow a remote attacker to gain increased privileges...

SIMATIC RTLS Locating Manager Code Execution

The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to deficiencies in the mechanism for verifying input data during backup scenario execution. Exploiting this vulnerability could allow an attacker, operating...

Linux Bluetooth Buffer Overflow DoS

The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems is related to incorrect resource management. Exploiting this vulnerability can allow an attacker to cause service failures...

NetScaler ADC Component Compromise Data Compromise

The vulnerability of the nsppe component of the NetScaler ADC application delivery controller formerly Citrix ADC and the NetScaler Gateway virtual environment access control system formerly Citrix Gateway relates to bypassing the authentication process by using an alternative path or channel...

Avast Sandbox Privilege Escalation

The vulnerability of the Avast Sandbox component of the Avast antivirus protection software is related to insecure management of privileges. Exploiting this vulnerability can allow a hacker to elevate their privileges to the SYSTEM level...

Linux kernel cryptographic accelerator driver Heap Buffer Overflow DoS

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to improper validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Syslog Server Code Execution

The vulnerability of the Syslog Server server used in managing the virtual infrastructure of VMware vCenter Server is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...