97848 matches found
Renesas Electronics RH850/F1L Voltage Spike Access
The vulnerability of the Renesas Electronics RH850/F1L microcontroller is related to improper protection against voltage spikes and clock frequency fluctuations. Exploiting this vulnerability can allow an attacker to gain access to the protected information...
HarmonyOS PDF Preview DoS
The vulnerability of the PDF Preview module in the HarmonyOS operating system is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
TOTOLINK N150RT Router Code Execution
The vulnerability of the /boafrm/formVlan function in TOTOLINK N150RT router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
Linux kernel i2c_imx_xfer Heap Buffer Overflow Info Disclosure
The vulnerability of the i2cimxxfer function in the drivers/i2c/busses/i2c-imx.c file of the Linux kernel is related to security configuration errors. Exploiting this vulnerability could allow an attacker to access protected information...
Tenda AC7 Router FormSetFirewallCfg Code Execution
The vulnerability of the formSetFirewallCfg function in the web interface of the Tenda AC7 router’s microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted POST reque...
Intel System Resources Defense Privilege Escalation
The vulnerability of Intel System Resources Defense and Intel System Security software related to Intel microprocessors involves executing operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...
Kernel Streaming WOW Thunk Service Driver Privilege Escalation
The vulnerability of the Kernel Streaming WOW Thunk Service Driver ksthunk.sys in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Resilient File System Deduplication Service Privilege Escalation
The vulnerability of the Resilient File System ReFS Deduplication Service in Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Microsoft Office Code Execution
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the use of an untrusted pointer. Exploiting this vulnerability can allow attackers to execute arbitrary code...
Laravel Information Disclosure
The vulnerability of the PHP framework Laravel is related to insufficient protection of sensitive data during the processing of the laravel.log file storage/logs/laravel.log. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
JPC Library Code Execution
The vulnerability of the jasimagedecode function in the JPC library for the JasPer set is related to the issue where the operation exits the buffer boundaries during the processing of ICC profiles. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Intel Integrated Sensor Hub Driver Privilege Escalation
The vulnerability of the Intel Integrated Sensor Hub driver for NUC P14E Laptop Element notebooks is related to the default access settings. Exploiting this vulnerability can allow attackers to gain increased privileges...
DedeCMS dialog/select_media.php File Read
The vulnerability of the dialog/selectmedia.php implementation in the DedeCMS content management system is related to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to read arbitrary files...
Juniper Networks Junos OS IP/MPLS DoS
The vulnerability of the IP/MPLS protocol implementation in Juniper Networks’ Junos OS-based QFX10000 routers stems from improper validation of certain indices, positions, or offsets in the input data. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending...
Acti9 PowerTag Link C Privilege Escalation
The vulnerability of the microprogramming software of the Acti9 PowerTag Link C communication module is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...
NETGEAR D7000 Wi-Fi Router Privilege Escalation
The vulnerability of NETGEAR D7000 Wi-Fi routers’ microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...
Junos Buffer Overflow Kernel Shutdown
The vulnerability of the Junos operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause a failure in the kernel’s memory dump process due to receiving an incorrect DHCPv6 packet...
ChakraCore JavaScript Script Handler RCE
The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
VMware vCenter Server Auth Bypass
The vulnerability of the management tool for virtual infrastructure, VMware vCenter Server, is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to user registration data...
Marketing Administration Oracle Marketing E-Business Suite Privilege Escalation
The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, or to gain unauthorized...
Cisco Prime Collaboration Provisioning Access Privilege
The vulnerability of the Cisco Prime Collaboration Provisioning software installation component for centralized product management involves the use of pre-installed user accounts. Exploiting this vulnerability could allow an attacker to gain access to the administrative web interface with...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the linux-headers-2.6.18-6-all-powerpc package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the linux-headers-2.6.26-2-686-bigmem package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
OpenSUSE Data Compromise
The multiple vulnerabilities in the cloop operating system package of OpenSUSE can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Telecom MG Code Execution
The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
MongoDB Information Disclosure
The vulnerability of the MongoDB database management system is related to the exposure of confidential information in the log files. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information...
TOTOLINK X15 Router DoS
The vulnerability of the built-in server boa /boafrm/formMapDel of the TOTOLINK X15 router microprogramming software is related to the issue of the operation exceeding the buffer boundaries in memory when processing the parameter devicemac1. Exploiting this vulnerability allows a remote attacker ...
CKEditor GHS XSS
The vulnerability of the General HTML Support function and the HTML embed panel in the Block Toolbar WYSIWYG-editor CKEditor is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability may allow a malicious actor to carry out XSS attacks remotely...
Linux Kernel Farch Buffer Overflow DoS
Vulnerability of the efxfarchhandletxevent function in the drivers/net/ethernet/sfc/farch.c module – The Linux kernel’s Ethernet network adapter support driver is vulnerable due to the use of a NULL pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a system...
SAML SSO Library Authentication Bypass
The vulnerability of the SAML SSO library in Ruby SAML and the Git-based software platform for collaborative code development on GitLab CE/EE is related to errors in cryptographic signature verification. Exploiting this vulnerability could allow an attacker to bypass authentication processes...
TP-Link TL-WR940N Root Code Execution
The vulnerability of the dnsserver1 and dnsserver2 parameter handlers in the TP-Link TL-WR940N router software lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root...
Red Hat 3scale API Management Auth Bypass
The vulnerability of the Red Hat 3scale API Management software lies in the deficiencies of its authentication mechanism. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...
Pug Template Code Execution
The vulnerability of the compileClient, compileFileClient, and compileClientWithDependenciesTracked functions of the Pug template for generating HTML markup formerly Jade is related to improper code generation control. Exploiting this vulnerability could allow a remote attacker to execute arbitra...
LayerSlider Plugin SQL Injection
The vulnerability of the lsgetpopupmarkup function in the assets/wp/actions.php script of the LayerSlider plugin for the WordPress content management system is related to the lack of protection for the SQL query structure when processing the id parameter. Exploiting this vulnerability allows an...
Gradle Quarkus Plugin Disclosure
The vulnerability of the Gradle plugin for the Quarkus Java framework is related to the disclosure of information through environment variables. Exploiting this vulnerability allows an attacker to disclose the protected information...
5G MediaTek Wireless Communication Module DoS
The vulnerability of 5G wireless communication modules by MediaTek is related to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
D-Link Administrator Console Command Execution
The vulnerability of the administrator consoles of microprogrammed software for D-Link DCH-M225 wireless signal amplifiers is related to the lack of measures taken to neutralize special elements used in the operating system’s command processing when handling the “media renderer” parameter in the...
Advantech R-SeeNet Router XSS
The vulnerability of the firmfilter parameter in the “devicelist” component of the Advantech R-SeeNet monitoring software relates to the improper handling of the firmfilter parameter. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks by sending special...
VLC MP4_ReadBox_rdrf Buffer Overflow DoS
The vulnerability of the MP4ReadBoxrdrf function in the VideoLAN VLC media player’s libmp4.c file is related to numerical processing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
libhevc DoS
The vulnerability of the libhevc library in the Media Framework of the Android operating system is related to insufficient state checking. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
Qualcomm TrustZone Privilege Escalation
The vulnerability of the TrustZone technology a DRM sub-program of Qualcomm’s Secure Execution Environment for Android from the CAF repository is related to numerical processing errors. Exploiting this vulnerability could allow a remote attacker to gain increased privileges...
vvdecapp reconstructCoeff Memory Use After Free
The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...
SIMATIC RTLS Locating Manager Code Execution
The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to deficiencies in the mechanism for verifying input data during backup scenario execution. Exploiting this vulnerability could allow an attacker, operating...
Linux Bluetooth Buffer Overflow DoS
The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems is related to incorrect resource management. Exploiting this vulnerability can allow an attacker to cause service failures...
NetScaler ADC Component Compromise Data Compromise
The vulnerability of the nsppe component of the NetScaler ADC application delivery controller formerly Citrix ADC and the NetScaler Gateway virtual environment access control system formerly Citrix Gateway relates to bypassing the authentication process by using an alternative path or channel...
Avast Sandbox Privilege Escalation
The vulnerability of the Avast Sandbox component of the Avast antivirus protection software is related to insecure management of privileges. Exploiting this vulnerability can allow a hacker to elevate their privileges to the SYSTEM level...
Linux kernel cryptographic accelerator driver Heap Buffer Overflow DoS
The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to improper validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Syslog Server Code Execution
The vulnerability of the Syslog Server server used in managing the virtual infrastructure of VMware vCenter Server is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
MagicYUV Decoder Code Execution
The vulnerability of the MagicYUV decoder on the FFmpeg media processing platform relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created malicious media file...
Ollama Loader Unauthenticated Access
The vulnerability of the loader for GGUF models in the Ollama system, which is used to run and manage large language models, involves reading data beyond the permitted range in memory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...