97848 matches found
Windows AppX Deployment Service Privilege Escalation
The vulnerability of the Windows AppX Deployment Service AppXSVC on Windows operating systems is related to errors in handling hard links. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
Java Advanced Management Console Unauthorized Access
The vulnerability of the Java Advanced Management Console Server component of the Oracle Java SE software platform is related to insufficient access control. Exploiting this vulnerability may allow an attacker operating remotely to gain unauthorized access to protected data or cause service...
Picketlink StaxParserUtil Disclosure
The vulnerability of the StaxParserUtil class in Picketlink software for managing security and application identification in Java applications is related to deficiencies in the processing of input data during SAML message analysis. Exploiting this vulnerability allows a malicious actor to disclos...
Windows Contacts Code Execution
The vulnerability of the “Windows Contacts” component in Windows operating systems is related to errors in processing VCF files. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a VCF file with a specially crafted value for the “URL” field...
Microsoft JET Database Engine Code Execution
The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
Windows Data Sharing Service Privilege Escalation
The vulnerability of the Windows Data Sharing Service in the Windows operating system is related to file handling errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
NormaCS Automation Tool Code Execution
The vulnerability of the NormaCS tool for automating the processing of regulatory documents is related to the use of the MFC library set. It arises due to deficiencies in the restriction on the searchable range of dynamically loaded libraries. Exploiting this vulnerability could allow a malicious...
Microsoft Visual Studio Service Data Access
The vulnerability of the Microsoft Visual Studio software lies in the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to protected information through a specially created file called .vscontent...
TeNIX PLC Full Access
The vulnerability of the TeNIX operating system for programmable logic controllers MFC1500 and MFC3000 is related to the use of a default weak password for the root account, information about which is not available in the documentation. Exploiting this vulnerability could allow an attacker,...
Excel Memory Object Error Access Disclosure
The vulnerability of Excel spreadsheet editors is related to errors in memory object processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information through a specially created file...
Windows Media Player Disclosure
The vulnerability of Windows Media Player on the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to determine whether files exist on the disk by using a specially created hyperlink...
Cisco Firepower System SMBv2/SMBv3 DoS
The vulnerability of the SMBv2 and SMBv3 protocols implemented by Cisco Firepower System arises from incorrect validation of the SMB message header. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
Windows Driver Authenticity Verification Kernel Load
The vulnerability of the Windows operating system is related to errors in the mechanism for verifying the authenticity of kernel drivers. Exploiting this vulnerability allows an attacker to load improperly signed drivers into the kernel...
Junos Routing Protocol Daemon Code Execution
The vulnerability of the Junos operating system’s Routing Protocol Daemon RPD arises from errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending numerous specially crafted Draft-Rosen MPLS packets...
Windows Task Scheduler SchRpcSetSecurity Code Execution
The vulnerability of the SchRpcSetSecurity function in the Advanced Local Procedure Call ALPC interface of the Windows operating system’s task scheduler is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute malicious code with SYSTEM privileges...
Apache Batik SVG Memory Corruption
The vulnerability of the Apache Batik library for working with SVG images is related to the restoration of a dubious data structure in memory the “AbstractDocument” class. Exploiting this vulnerability could allow an attacker to gain access to protected data or cause service failures using the HT...
dnslint Code Execution
The vulnerability of the DNS server testing tool dnslint exists because measures are not taken to protect the structure of web pages when generating reports. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file that defines the rules for...
BI Publisher Security Unauthorized Access
The vulnerability of the BI Publisher Security component of the BI Publisher reporting tool is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...
JD Edwards EnterpriseOne Tools Unauthorized Access
The vulnerability of the Monitoring and Diagnostics component of the JD Edwards EnterpriseOne Tools system is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...
Node.js phpinfo Command Arbitrary Command Execution
The vulnerability of the phpinfo function in Node.js, specifically pdfinfojs, stems from the lack of mechanisms to neutralize special elements in input commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted request...
Qualcomm WLAN Driver Privilege Escalation
The vulnerability of the Qualcomm WLAN operating system driver for Android, found in the CAF repository, is due to an overflow in the buffer in the “stack”. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
Embedthis GoAhead Code Execution
The vulnerability of the cgiHandler function in the Embedthis GoAhead web server is related to insufficient validation of input data during the processing of HTTP requests for dynamically linked CGI programs. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through...
Sonicwall Secure Remote Access diagnostics Component Command Execution
The vulnerability of the “diagnostics” component /cgi-bin/diagnostics of the CGI application for the web interface of the Dell Inc. Sonicwall Secure Remote Access SRA system management application is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a...
MPEG-2 decoder Code Execution
The vulnerability in the MPEG-2 decoder of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Android Code Execution
The vulnerability of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Aerospike Database Server Code Execution
The vulnerability of the RW-message structure in the Aerospike Database Server of the Oracle Database database management system is related to unvalidated array indexing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code read from beyond the memory limit using a...
FFmpeg Memory Limit Recording
The vulnerability of the FFmpeg multimedia library arises from buffer overflows in the stack. Exploiting this vulnerability allows a malicious actor to perform out-of-memory writes, related to the decodezbuf function in libavcodec/pngdec.c...
Chakra JavaScript Engine Microsoft Edge DoS Execution Code
The vulnerability in the Chakra JavaScript engine of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure memory corruption by using a specially crafted...
Xen Hypervisor Code Execution
The vulnerability of Xen hypervisors is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating locally, to execute arbitrary code on the host OS using the IRET hypervisor...
Linux SCTP DoS
The vulnerability of the sctpsfootb function in the Linux kernel’s net/sctp/smstatefuns.c file allows for data to be read beyond the specified buffer. Exploiting this vulnerability can enable a malicious actor to cause service failures or exert other effects using specially crafted SCTP data...
Android drivers regulator core Heap Buffer Overflow Privilege Escalation
The vulnerability of the regulatorenagpiofree function in the drivers/regulator/core.c component of the Android operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to increase their privileges or cause a service failure the...
PDF Viewer Data Compromise Breach
The vulnerability of image conversion tools for viewing and editing PDF files, such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat, is related to reading beyond the buffer limit and memory leaks caused by parsing EMF format files. Exploiting this...
Mac OS X Information Disclosure
The vulnerability of the Intel Graphics Driver component in the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information through a specially created applicatio...
Microsoft Edge Code Execution
The vulnerability of the rendering mechanisms for executing browser scripts in Microsoft Edge arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Windows Information Disclosure
The vulnerability of the Uniscribe component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, acting remotely, to obtain confidential information from the process’s memory through a specially crafted web...
Cisco Systems Inc. Code Execution
The vulnerability in the code that handles CMP protocol for networking devices of Cisco Systems Inc. is related to incorrect processing of Telnet options specific to the CMP protocol. Additionally, there are no restrictions on the reception and processing of Telnet messages from sources that are...
Windows Information Disclosure
The vulnerability of the Uniscribe component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, acting remotely, to obtain confidential information from the process’s memory through a specially crafted web...
Android Data Compromise
The vulnerability of the decoder/ihevcdDecode.c function in the libhevc service of the Android operating system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of information...
Android Code Execution
The vulnerability related to privilege escalation of the HTC Android operating system’s audio codecs is linked to access control deficiencies. Exploiting this vulnerability allows a remote attacker to execute arbitrary local malware code within the kernel context. This issue is considered “highly...
Android Code Execution
The vulnerability of NVIDIA GPU kernel driver for the Android operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a malicious application remotely...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the gcc-3.4-base operating system package of the Debian GNU/Linux distribution may lead to a violation of the integrity of protected information. These vulnerabilities can be exploited remotely...
Internet Explorer Code Execution
A vulnerability that allows a remote attacker to execute arbitrary code or trigger a service denial using a specially crafted website...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the kernel-image-2.6.8-3-powerpc-smp operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Local Compromise Data Compromise
The kernel-image-2.6-amd64-generic package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local...
Debian GNU/Linux Local Compromise Data Compromise
The multiple vulnerabilities in the kernel-image-2.6-686-smp operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious actors...
Debian GNU/Linux Local Compromise Data Compromise
The multiple vulnerabilities in the kernel-image-2.6-em64t-p4-smp operating system of Debian GNU/Linux may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious actors...
Siemens Simatic S7-1200 PLC
The software of the programmable logic controller Simatic S7-1200 contains a vulnerability that causes loss of access to the device during the processing of specific TCP/IP packets...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the kernel-image-2.6.8-2-sparc64 operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the kernel-image-2.6.8-2-686-smp operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Firefox Information Disclosure
The vulnerability of the Firefox browser improperly restricts access to JavaScript for data related to movement. Exploiting this vulnerability can allow a remote attacker to obtain confidential device information and the PIN code through a specially crafted web page...