97848 matches found
OpenSUSE Data Compromise
The cloop-kmp-default-debuginfo package in the operating system openSUSE has multiple vulnerabilities. Exploiting these vulnerabilities can lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Realtek RTL8762C SWD Information Disclosure
The vulnerability of the Serial Wire Debug SWD interface in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to improper protection against voltage and clock failures. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and...
Windows Update Stack Privilege Escalation
The vulnerability of the Windows Update Stack component in Windows operating systems is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow an attacker to increase their privileges...
Linux kernel spidev.c DoS
The vulnerability of the spidev.c component in the Linux operating system’s kernel is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
VK WorkMail URL Redirection Phishing
The vulnerability in the validation of URL addresses of the corporate email service VK WorkMail involves redirecting URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to carry out phishing attacks remotely...
gix_worktree_state checkout Code Execution
The vulnerability of the gixworktreestate::checkout function in the Rust library for working with Git repositories like gitoxide is related to an incorrect definition of symbolic references before accessing files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary co...
FortiPAM SSL-VPN Code Execution
The vulnerability of the SSL-VPN component of the FortiPAM account management system, the FortiOS operating system, the local software development platform FortiSwitch Manager, and the FortiProxy proxy server for internet attack protection is related to the lack of security measures for the websi...
NetScaler ADC Buffer Overflow DoS
The vulnerability of the NetScaler ADC application delivery controller formerly Citrix ADC and the NetScaler Gateway virtual environment access control system formerly Citrix Gateway is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could all...
NILFS2 File System Heap Buffer Overflow DoS
The vulnerability of the nilfssegctorthread function in the fs/nilfs2/segment.c file of the NILFS2 file system in the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
Junos OS DoS
The vulnerability of Junos OS routers of the SRX series lies in improper resource locking. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
PDF Document Buffer Overflow
The vulnerability of PDF viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the issue of operations going beyond the buffer in memory during the processing of U3D files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
libnetcore Privilege Escalation
The vulnerability of the libnetcore library in MacOS, tvOS, visionOS, iPadOS, and iOS operating systems is related to errors in the use of standard permissions. Exploiting this vulnerability can allow a remote attacker to increase their privileges...
E-Staff automated recruitment process system JavaScript Execution
The vulnerability of the E-Staff recruitment process automation system is related to errors in data filtering during object updates. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code remotely...
Linux kernel BPF verifier Heap Buffer Overflow DoS
The vulnerability of the adjustptrminmaxvals function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter for Linux operating systems, is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality an...
Node Access Rebuild Access Control Bypass
The vulnerability of the Node Access Rebuild component in Drupal CMS systems is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to bypass security restrictions remotely...
CyberPanel Arbitrary Command Execution
The vulnerability of the CyberPanel web hosting control panel exists due to the lack of measures taken to neutralize certain elements. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands using a specially created HTTP OPTIONS request...
Prome CEF SubProcess Heap Buffer Overflow DoS
The vulnerability of the executable file promecefpluginhost.exe from the Prome CEF SubProcess subsystem of the WPS Office office software package on Windows operating systems is related to an incorrect path limitation for accessing the restricted directory. Exploiting this vulnerability could all...
SCALANCE M-800 File Name Data Compromise
The vulnerability of the microprogrammed software in industrial routers SCALANCE M-800 relates to the inability to clean file names before loading. Exploiting this vulnerability can allow an intruder to compromise the integrity of the system...
OpenCV Heap Buffer Overflow DoS
The vulnerability of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, relates to repeated memory reclamation. Exploiting this vulnerability can allow remote attackers to gain access to confidential data, compromise its integrity, and cause...
pgAdmin XSS
The vulnerability of the /settings/store API of the pgAdmin database management tool is related to the lack of security measures for the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...
Lenovo Vantage Service RCE
The vulnerability of the optimization tool for automatic BIOS driver updates in Lenovo Vantage Service involves bypassing authentication through spoofing. Exploiting this vulnerability allows a perpetrator to execute arbitrary code with elevated privileges...
Google Chrome V8 Engine RCE
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to access to resources through incompatible types. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially created malicious web page...
Adobe Experience Manager Code Execution
The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Nagios XI Script Arbitrary Command Execution
The vulnerability of the Nagios XI monitoring tool’s script located at /usr/local/nagiosxi/html/includes/configwizards/windowswmi/windowswmi.inc.php is related to the failure to take measures to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a...
G Data antivirus Privilege Escalation
The vulnerability of the file recovery mechanism of the G Data antivirus software is related to incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...
Video system Component Unauthorized Access
The vulnerability of the Video microprogramming software component in Qualcomm’s embedded chips relates to the lack of checks for buffer length and reading beyond the memory boundary when processing AVI files. Exploiting this vulnerability can allow an intruder to gain unauthorized access to...
PyPI eth-account encode_structured_data DoS
The vulnerability of the encodestructureddata method in the PyPI package eth-account is related to incorrect data input used as a condition for loop execution. Exploiting this vulnerability could allow an attacker to cause service failures...
Radare2 Uninitialized Pointer Code Execution
The vulnerability of the reverse-engineering framework Radare2 relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...
NUUO NVRmini NVRsolo PHP Code Execution
The vulnerability of the debuggingcenterutils.php component in NUUO NVRmini and NVRsolo network video recording systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary PHP code...
JMS Connector Service server Code Execution
The vulnerability of the JMS Connector Service server in SAP NetWeaver Java Application Server applications is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions or execute arbitrary code by...
RSVPMaker Plugin SSRF
The vulnerability of the import function implementation /wp-admin/tools.php?page=rsvpmakerexportscreen of the RSVPMaker plugin for WordPress’s content management system is related to insufficient validation of incoming requests. Exploiting this vulnerability could allow a malicious actor to perfo...
Oracle Trade Management UI Unauthorized Access Data Modification
The vulnerability of the User Interface component of the Oracle Trade Management application, part of the Oracle E-Business Suite, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or to...
D-Link Router Unencrypted Credentials
The vulnerability of D-Link DSL-2875AL and DSL-2877AL router microprogramming systems lies in the unencrypted storage of user credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Cisco Vision Dynamic Signage Director Unauthorized Access
The vulnerability of the Cisco Vision Dynamic Signage Director web interface management interface is related to configuration errors in Apache. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information by sending a specially...
Cisco Webex Network Recording Player Code Execution
The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems is related to improper validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted files in the Advanced Recording...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the sndfile-programs package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
libjpeg-turbo-static-1.2.1 Data Compromise
The libjpeg-turbo-static-1.2.1 package on the Red Hat Enterprise Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to violations of the confidentiality of protected information. These vulnerabilities can be exploited remotely...
Webasyst Shop-Script CMS Path Traversal
The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in incorrect restrictions on the path to the catalog. Exploiting this vulnerability can allow an attacker to gain unauthorized access to local files and directories on the server...
Go crypto/tls Unauthorized Access
The vulnerability of the crypto/tls component in the Go programming language is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Netty Component Unauthorized Access
The vulnerability of the io.netty.incubator.netty-incubator-codec-ohttp-hpke-classes-boringssl component, a framework for developing network applications, servers, and protocol clients using Netty, relates to the disclosure of information. Exploiting this vulnerability may allow an attacker,...
PostgreSQL to_char Function Code Execution
The vulnerability of the tochartimestamptz function in the PostgreSQL database management system is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
VMware Directory Service Unauthorized Access
The vulnerability of the VMware Directory Service, a component of the VMware vCenter Server virtual infrastructure management tool, is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Microsoft Excel Buffer Overflow
The vulnerability of Microsoft Excel spreadsheet editors is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created malicious file...
AMD DRI Driver Buffer Overflow DoS
The vulnerabilities of the functions dcn20enablestream drivers/gpu/drm/amd/display/dc/hwss/dcn20/dcn20hwseq.c and dcn401enablestream drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401hwseq.c in Linux kernel-based AMD Direct Rendering Infrastructure DRI graphics card drivers are related to state...
Portainer customTemplateFile XSS
The vulnerability of the Portainer container management platform’s customTemplateFile function is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
html-react-parser PostgreSQL XSS
The vulnerability of the html-react-parser tool used in pgAdmin 4 database management software is related to incorrect data encoding or filtering. Exploiting this vulnerability could allow an attacker to perform cross-site scripting attacks remotely...
Microsoft Exchange Server Privilege Escalation
The vulnerability of Microsoft Exchange Server is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
Microsoft Azure Attestation Service Device Health Attestation Service Spoofing
The vulnerability of the Microsoft Azure Attestation Service and Device Health Attestation Service for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to perform spoofing attacks...
iCore Antivirus RCE
The vulnerability of the iCore antivirus software from Trend Micro’s Apex One service is related to a data source verification error. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...
DNS Client Windows Code Execution
The vulnerability of the DNS Client component for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...