95883 matches found
The vulnerability of the Kofax PowerPDF Advanced software, which is used for creating, converting, editing, and publishing PDF files, relates to operations that occur outside the buffer in memory. This vulnerability allows an attacker to execute arbitrary code.
The vulnerability of the Kofax PowerPDF Advanced software for creating, converting, editing, and publishing PDF files is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Vulnerability of the `getUsersOfRoom` method in the server-based corporate messaging system that supports file sharing and video conferencing in Rocket. This chat feature allows attackers to expose sensitive information.
The vulnerability of the getUsersOfRoom method in the server-based corporate messaging system that supports file sharing and video conferences in Rocket. Chat involves insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive informatio...
The vulnerability of the Video microprogramming system component in Qualcomm’s embedded chips allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Video microprogramming software component in Qualcomm’s embedded chips relates to the lack of checks for buffer length and reading beyond the memory boundary when processing AVI files. Exploiting this vulnerability can allow an intruder to gain unauthorized access to...
The vulnerability of the Radare2 reverse-engineering framework, related to access to an uninitialized pointer, allows a hacker to execute arbitrary code.
The vulnerability of the reverse-engineering framework Radare2 relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...
Vulnerability of the __debugging_center_utils___.php component in NUUO NVRmini and NVRsolo network video recording systems, allowing intruders to execute arbitrary PHP code.
The vulnerability of the debuggingcenterutils.php component in NUUO NVRmini and NVRsolo network video recording systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary PHP code...
The vulnerability of the Xtra decoder, a decoding component for the MPEG-4 multimedia platform GPAC, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Xtra decoder, which is used for decoding MPEG-4 multimedia platforms like GPAC, is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the import function implementation (/wp-admin/tools.php?page=rsvpmaker_export_screen) of the RSVPMaker plugin for WordPress content management system allows a hacker to perform an SSRF attack.
The vulnerability of the import function implementation /wp-admin/tools.php?page=rsvpmakerexportscreen of the RSVPMaker plugin for WordPress’s content management system is related to insufficient validation of incoming requests. Exploiting this vulnerability could allow a malicious actor to perfo...
The vulnerability of several functions in libscp_v0.c allows an attacker to access confidential information or cause service failures, due to buffer overflows in the stack of the RDP server xrdp.
The vulnerability of several functions in libscpv0.c affects the RDP server xrdp. It involves buffer overflow in the data stack buffer. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...
The vulnerability of Google Chrome’s Skia graphic library allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of Google Chrome’s Skia graphics library is related to the storage of data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability in the web interface of the Cisco Vision Dynamic Signage Director system allows a intruder to gain unauthorized access to protected information.
The vulnerability of the Cisco Vision Dynamic Signage Director web interface management interface is related to configuration errors in Apache. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information by sending a specially...
The vulnerability of the PDFium browser’s PDF-content processor in Google Chrome allows a hacker to gain unauthorized access to information.
The vulnerability of the PDFium browser for processing PDF content in Google Chrome is caused by a numerical overflow condition. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information through a specially created PDF file...
Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the accessibility of protected information
The kernel-kdumppae-debuginfo package of the SUSE Linux Enterprise operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the VMware Directory Service, a component of the VMware vCenter Server virtualization infrastructure management tool, allows an attacker to gain unauthorized access to protected information.
The vulnerability of the VMware Directory Service, a component of the VMware vCenter Server virtual infrastructure management tool, is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Program Compatibility Assistant Service in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Program Compatibility Assistant service for Windows systems is related to synchronization errors when using a common resource “Race Condition”. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Model.load_model() function in the Keras library allows a hacker to execute arbitrary code.
The vulnerability of the Model.loadmodel function in the Keras library is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Mattermost instant messaging application, related to insufficient validation of requests on the server side, allows a hacker to perform an SSRF attack.
The vulnerability of the Mattermost instant messaging application is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...
The vulnerability of the JavaScript library for creating dynamic and interactive Billboard.js charts lies in the uncontrolled modification of prototype attributes of objects. This allows attackers to execute arbitrary code and cause service failures.
The vulnerability of the JavaScript library for creating dynamic and interactive Billboard.js charts is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code and cause service interruptions...
The vulnerability of the rgxfw_write_robustness_buffer() function in the Driver Development Kit (DDK) toolset allows a hacker to gain unauthorized access to protected information.
The vulnerability of the rgxfwwriterobustnessbuffer function in the Driver Development Kit DDK toolset is related to context privilege switching errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the gf_odf_ac4_cfg_alternative_info function in the MP4Box utility of the GPAC multimedia platform allows a perpetrator to cause a service failure or execute arbitrary code.
The vulnerability of the gfodfac4cfgalternativeinfo function in the MP4Box utility of the GPAC multimedia platform is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...
The vulnerability of the reNgine software tool for automated web application reconnaissance, related to insufficient protection of operational data, allows a perpetrator to disclose protected information.
The vulnerability of the reNgine software tool for automated web application reconnaissance is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...
The vulnerability of the libnetcore library in MacOS, tvOS, visionOS, iPadOS, and iOS systems allows attackers to gain increased privileges.
The vulnerability of the libnetcore library in MacOS, tvOS, visionOS, iPadOS, and iOS operating systems is related to errors in the use of standard permissions. Exploiting this vulnerability can allow a remote attacker to increase their privileges...
The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the ability to write code beyond the buffer boundaries in memory, allowing attackers to execute arbitrary code.
The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the ability to write beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the E-Staff automated recruitment process system, related to data filtering errors, allows a violator to compromise the integrity of the protected information.
The vulnerability of the E-Staff recruitment process automation system is related to errors in data filtering. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity of the protected information...
The vulnerability of the adjust_ptr_min_max_vals() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support in the Linux operating system’s kernel, allows attackers to compromise the confidentiality and accessibility of protected information.
The vulnerability of the adjustptrminmaxvals function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter for Linux operating systems, is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality an...
The vulnerability of software solutions that support the closing, consolidation, and reporting processes of IBM Cognos Controller and IBM Controller lies in the lack of a mechanism for generating error reports. This allows attackers to gain unauthorized access to protected information.
The vulnerabilities of the software solutions that support the closing, consolidation, and reporting processes of IBM Cognos Controller and IBM Controller are related to deficiencies in the mechanism for generating error reports. Exploiting these vulnerabilities can allow unauthorized actors to...
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the use of an untrusted pointer, allowing a malicious actor to execute arbitrary code.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the use of an untrusted pointer. Exploiting this vulnerability can allow attackers to execute arbitrary code...
The vulnerability of the Drupal Security Kit module in the Drupal CMS system allows attackers to trigger a service failure.
The vulnerability of the Drupal Security Kit CMS system’s module is related to access to resources through incompatible types. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
The vulnerability in Microsoft Word, Microsoft Office suites, and Microsoft 365 Apps for Enterprise allows a perpetrator to execute arbitrary code.
The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise is related to the use of an untrusted pointer. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the software for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP lies in the improper assignment of permissions to critical resources. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerabilities in the software used for developing and executing applications in the ABAP language of SAP NetWeaver Application Server ABAP are related to the improper assignment of permissions to critical resources. Exploiting these vulnerabilities can allow attackers, operating remotely, to...
The vulnerability in the script htdocs/webinc/js/adv_parent_ctrl_map.php of the D-Link DIR-860L, DIR-865L, DIR-868L, DIR-880L routers allows a attacker to execute an XSS attack.
The vulnerability in the script htdocs/webinc/js/advparentctrlmap.php of the D-Link DIR-860L, DIR-865L, DIR-868L, and DIR-880L routers exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows an attacker to execute an XSS attack through the...
The vulnerability of the Portal for ArcGIS web portal, related to improper external management of file names or paths, allows a perpetrator to disclose protected information.
The vulnerability of the Portal for ArcGIS is related to improper external management of the file name or path. Exploiting this vulnerability can allow a malicious actor to disclose protected information through a specially created web page...
The vulnerability of the Red Hat 3scale API Management software, related to deficiencies in authentication mechanisms, allows attackers to circumvent existing security restrictions.
The vulnerability of the Red Hat 3scale API Management software lies in the deficiencies of its authentication mechanism. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...
The vulnerability of the sctp_sf_do_unexpected_init() function in the Linux kernel of the SCTP protocol allows a attacker to cause a service failure.
The vulnerability of the sctpsfdounexpectedinit function in the SCTP protocol’s kernel implementation in Linux is related to a memory leak that occurs when processing invalid INIT packets. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...
The vulnerability of the msp_info.htm file on the D-Link DI-8100G network device allows a hacker to bypass security restrictions and execute arbitrary commands.
The vulnerability of the mspinfo.htm file on the D-Link DI-8100G network device is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to bypass security restrictions and execute arbitra...
The vulnerability of the IBM QRadar SIEM system for event collection and analysis, related to the disclosure of protected information, allows attackers to gain unauthorized access to confidential data.
The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to the disclosure of protected information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the artificial intelligence tool AutoGPT arises from the failure to address the issue of eliminating special elements used in the operating system’s command set, allowing a perpetrator to execute arbitrary code.
The vulnerability of the artificial intelligence tool AutoGPT exists due to the failure to address the issue of neutralizing specific elements used in the operating system’s command line. Exploiting this vulnerability allows a hacker to execute arbitrary code when using an instance of AutoGPT wit...
The vulnerability of the Windows operating system’s DNS server allows a hacker to execute arbitrary code.
The vulnerability of the Windows operating system’s DNS server is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the microprogrammed software of Advantech EKI-1524, EKI-1522, and EKI-1521 lies in the ability to inject commands into the input field of the NTP server, allowing a perpetrator to execute arbitrary code.
The vulnerability of the microprogrammed software of Advantech EKI-1524, EKI-1522, and EKI-1521 lies in the ability to inject commands into the input field of the NTP server. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted POST request...
The vulnerability of the CLI microprogramming software for D-Link routers such as DIR-2150 and DIR-1260 allows a hacker to execute arbitrary code.
The vulnerability of the CLI microprogramming software-based D-Link DIR-2150 and DIR-1260 routers is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Vulnerability of the landing module of the content management system (CMS) for 1C-Bitrix: A website management tool that allows a hacker to execute OS commands on a vulnerable node, gain control over resources, and penetrate the internal network.
Vulnerability of the landing module of the CMS system: Website management is triggered by synchronization errors when using a common resource. Exploiting this vulnerability allows a malicious actor to remotely execute OS commands on a vulnerable node, gain control over resources, and penetrate th...
The vulnerability of the Keycloak identity and access management software lies in its susceptibility to attacks involving cross-site scripting (XSS). This vulnerability arises due to shortcomings in the security measures protecting the website structure, allowing attackers to carry out XSS attacks.
The vulnerability of the Keycloak identity and access management software is related to deficiencies in the security measures protecting the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
Vulnerability of the CMS system: 1C-Bitrix. Website management that arises from the lack of measures to protect the structure of web pages allows attackers to inject malicious content into the website.
Vulnerability of the CMS system 1C-Bitrix: Website management exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject malicious content using BBcode functions...
The vulnerability of the Nagios XI monitoring tool’s script /usr/local/nagiosxi/html/includes/configwizards/windowswmi/windowswmi.inc.php allows a attacker to execute arbitrary commands.
The vulnerability of the Nagios XI monitoring tool’s script located at /usr/local/nagiosxi/html/includes/configwizards/windowswmi/windowswmi.inc.php is related to the failure to take measures to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a...
The vulnerability of the encode_structured_data method in the PyPI eth-account package allows a attacker to cause a service failure.
The vulnerability of the encodestructureddata method in the PyPI package eth-account is related to incorrect data input used as a condition for loop execution. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the Windows operating system’s kernel API allows a perpetrator to gain unauthorized access to modify, add, or delete data.
The vulnerability of the Windows operating system’s kernel API is related to errors in the FileObject structure. Exploiting this vulnerability can allow an attacker to gain unauthorized access to modify, add, or delete data...
The vulnerability of the Java VM component of the Oracle Database Server database management system allows attackers to compromise the integrity of the protected information.
The vulnerability of the Java VM component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...
The vulnerability of the sub-component of the Dynamo Application Framework within the component of the Oracle Commerce Platform of the e-commerce platform Oracle Commerce allows a perpetrator to gain access to modify, add, or delete data.
The vulnerability of the sub-component of the Dynamo Application Framework within the Oracle Commerce Platform of the e-commerce platform Oracle Commerce exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to remotely access and modify,...
The vulnerability of the RDP client FreeRDP, related to the execution of operations beyond the buffer boundaries in memory, allows a hacker to trigger a service failure.
The vulnerability of the RDP client FreeRDP relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the implementation of the elliptic curve-based cryptography method in the Microsoft Research JavaScript Cryptography Library allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the implementation of the elliptic curve-based cryptography method in Microsoft Research’s JavaScript Cryptography Library is related to incorrect calculations. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...
The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser allows a hacker to execute arbitrary code.
The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...