92298 matches found
The vulnerability of messaging and video conferencing tools arises from incorrect restrictions on the path to the restricted catalog, allowing attackers to disclose protected information.
The vulnerability of the Message and Video Conference Messaging tool is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability can allow a malicious actor to disclose protected information...
The vulnerability of the SQL concat_ws() function in the SQLite database management system, allowing a hacker to cause a service failure
The vulnerability of the SQL concatws function in the SQLite database management system is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure through the malloc parameter...
The vulnerability of VideoGrace video conference software, related to insufficient validation of input data, allows a perpetrator to cause service failures.
The vulnerability of VideoGrace video conferencing software is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the reNgine software tool for automated web application reconnaissance, related to insufficient protection of operational data, allows a perpetrator to disclose protected information.
The vulnerability of the reNgine software tool for automated web application reconnaissance is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...
The vulnerability of the /cgi-bin/ExportIbmsConfig.sh file, a component of the IBMS Configuration File Handler microprogramming system for TOTOLINK A3000RU routers, allows a hacker to trigger a service failure.
The vulnerability of the /cgi-bin/ExportIbmsConfig.sh file, a component of the IBMS Configuration File Handler microprogramming system for TOTOLINK A3000RU routers, is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause service interruptions...
The vulnerability of the NTPSyncWithHost() function in Totolink’s microprogrammed router software allows a hacker to execute arbitrary code.
The vulnerability of the NTPSyncWithHost function in Totolink router microprogramming software is related to the failure to take measures to neutralize special elements of the hostTime parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the PHP library TCPDF, related to incorrect pathname restrictions for restricted access directories, allows attackers to gain unauthorized access to protected information.
The vulnerability of the PHP library TCPDF lies in the incorrect path limitation for the access to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the software for managing and monitoring remote devices in telemetry and telemechanics systems, related to the lack of measures taken to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.
The vulnerability of software for managing and monitoring remote devices in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
The vulnerability of the E-Staff automation system for recruitment processes is related to errors in data filtering when obtaining information about the target. This allows a violator to gain unauthorized access to protected information.
The vulnerability of the E-Staff recruitment process automation system is related to errors in data filtering when obtaining information about the target. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the ChromeOS operating system’s kernel, which arises due to insufficient validation of input data, allows a hacker to execute arbitrary code.
The vulnerability of the ChromeOS operating system’s kernel exists due to insufficient validation of input data. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...
The vulnerability of the ipsec_net_asp function in the D-Link DI-8100 network device allows a hacker to execute arbitrary code.
The vulnerability of the ipsecnetasp function in the D-Link DI-8100 network device’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially...
The vulnerability of the task and project management service WEEEK lies in the improper restriction on recursive references to entities in the DTD. This allows a violator to trigger a service failure.
The vulnerability of the WEEEK task and project management service is related to improper restrictions on recursive references to entities in the DTD. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Ivanti EPM endpoint management software, related to reading data beyond the buffer in memory, allows a hacker to trigger a service failure.
The vulnerability of the Ivanti EPM endpoint management software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service failures...
The vulnerability of the unserialize() function in the Eloqua CMS system’s Drupal module allows a hacker to execute arbitrary code.
The vulnerability of the unserialize function in the Eloqua CMS system’s Drupal module is related to the restoration of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the DefaultServlet server servlet in the Apache Tomcat application server allows a attacker to execute arbitrary code.
The vulnerability of the DefaultServlet server component in the Apache Tomcat application server is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the ocfs2 component in the Linux operating system allows a hacker to gain elevated privileges within the system.
The vulnerability of the ocfs2 component in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...
The vulnerability of mediatek’s kernel components in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of mediatek’s Linux operating system kernel components relates to the assignment of the NULL pointer in the mtksofdailinkfixup function. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of DRM/VKMS components in Linux kernel allows a perpetrator to trigger a service failure.
The vulnerability of DRM/VKMS components in Linux operating systems is related to improper input validation in the function applyluttochannelvalue. Exploiting this vulnerability can allow an attacker to trigger a service failure...
The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows an attacker to gain full access to the vulnerable software.
The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, is related to errors in processing input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain full access to the vulnerable software by sending...
The vulnerability of the WSDL query processor in the “Update Service” software allows a attacker to gain read access to local files.
The vulnerability of the WSDL query processor in the “Update Service” software is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to gain read access to local files...
The vulnerability of the environment loader for IoT application development, esp-idf, allows a attacker to bypass anti-rollback protection.
The vulnerability of the IoT application development environment loader espressif esp-idf is related to state management errors. Exploiting this vulnerability could allow an attacker to bypass anti-rollback protection mechanisms...
The vulnerability of the `compileClient`, `compileFileClient`, and `compileClientWithDependenciesTracked` templates for generating Pug markup (formerly Jade) allows attackers to execute arbitrary code.
The vulnerability of the compileClient, compileFileClient, and compileClientWithDependenciesTracked functions of the Pug template for generating HTML markup formerly Jade is related to improper code generation control. Exploiting this vulnerability could allow a remote attacker to execute arbitra...
The vulnerability of Huawei’s microprogrammed router software, related to insufficient validation of input data, allows attackers to trigger service failures or disclose protected information.
The vulnerability of Huawei’s microprogrammed router software is related to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures or expose protected information...
The vulnerability of the ConnectWise ScreenConnect remote access software lies in its ability to bypass the authentication process by using an alternative path or channel. This allows a perpetrator to execute arbitrary code.
The vulnerability of the ConnectWise ScreenConnect remote access software lies in the ability to bypass the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...
The vulnerability of the app.ini configuration file of the Nginx UI server allows a hacker to execute arbitrary code.
The vulnerability of the app.ini configuration file of the Nginx UI server involves a lack of measures to eliminate special elements during the processing of parameters testconfigcmd and startcmd. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
The vulnerability of the H5Dchunk.c component in the HDF5 file processing library allows a attacker to cause a service failure.
The vulnerability of the H5Dchunk.c component in the HDF5 file processing library is related to the lack of checks for division by zero. Exploiting this vulnerability can allow a remote attacker to cause a service failure using a specially created HDF file...
The vulnerability of programming tools for monitoring and managing network infrastructure Hitachi JP1/Performance Management lies in the default access settings, which allow a perpetrator to gain access to files and directories.
The vulnerability of software tools for monitoring and managing network infrastructure of Hitachi JP1/Performance Management is related to the default access settings. Exploiting this vulnerability can allow attackers to gain access to files and directories...
The vulnerability in the web interface of Supermicro X11 series BMC IPMI servers involves insufficient protection of the website structure, allowing attackers to carry out cross-site scripting attacks.
The vulnerability in the web interface of BMC IPMI Supermicro X11 series servers exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using specially crafted GET requests...
The vulnerability of the ProFTPD FTP server, related to a memory release error, allows attackers to gain unauthorized access to protected information.
The vulnerability of the ProFTPD FTP server is related to a memory release error. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the command-line interface of the SQLite database management system allows a hacker to gain unauthorized access to prohibited user functions.
The vulnerability of the command-line interface of the SQLite database management system is related to errors in the implementation of the azAllowedFunctions protection mechanism. Exploiting this vulnerability can allow an attacker to gain unauthorized access to prohibited user functions...
The vulnerability of the SAP BW BI Consumer Service (BICS) service in the SAP Data Management and Analytics systems, such as SAP Business Warehouse and SAP BW/4HANA, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the SAP BW BI Consumer Service BICS module, which is part of the SAP Business Warehouse and SAP BW/4HANA data management and analytics systems, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain...
The vulnerability of the init_cea_offsets() function in the /arch/x86/mm/cpuEntryArea.c file of the Linux kernel’s memory management subsystem allows a attacker to access protected information and enhance their privileges.
The vulnerability of the initceaoffsets function in the /arch/x86/mm/cpuEntryArea.c file, belonging to the memory management subsystem of the Linux operating system, is related to the accessibility of the per-cpu memory area for user address space. Exploiting this vulnerability could allow an...
The vulnerability of the Enhanced Security mode of the Teacher Console and Student Console on the Faronics Insight computer network management platform allows a perpetrator to bypass security restrictions, gain unauthorized access to protected information, or execute arbitrary codes.
The vulnerability of the Enhanced Security mode of the Teacher Console and Student Console on the Faronics Insight computer network management platform is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to circumvent...
The vulnerability of the SAP Customer Data Cloud data management software lies in the use of a non-safe random number generator program, which allows an attacker to disclose sensitive information.
The vulnerability of the SAP Customer Data Cloud data management software is related to the use of a non-safe random number generator program. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose sensitive information...
The vulnerability of the SetNetworkTomographySettings function in D-Link COVR 1200,1202,1203 router microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the SetNetworkTomographySettings function in D-Link COVR 1200,1202,1203 router microprogramming software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands throug...
The vulnerability of the Mozilla Firefox browser for Android, related to deficiencies in access control, allows attackers to circumvent existing security restrictions.
The vulnerability of the Mozilla Firefox browser for Android is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
The vulnerability of the Azure Storage Library, related to deficiencies in system-defined boundaries, allows attackers to gain unauthorized access to protected information.
The vulnerability of Azure Storage Library is related to deficiencies in the system’s controlled zone segmentation. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the SAP Business One resource management system allows a perpetrator to execute arbitrary codes.
The vulnerability of the SAP Business One resource management system is related to insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Mat_VarReadNextInfo5 function in the mat5.c library for reading and writing MATLAB MATIO files allows a hacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the MatVarReadNextInfo5 function in the mat5.c library for reading and writing MATLAB MATIO files is related to integer overflow. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the WebSockets API component of the CodeMeter license control application allows a perpetrator to execute arbitrary code.
The vulnerability of wibu codemeter software lies in the use of cryptographic algorithms that contain defects. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Dallas Lock Linux event registration subsystem, related to memory release errors, allows a intruder to trigger a service failure on the workstation.
The vulnerability of the Dallas Lock Linux event registration subsystem is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a system failure by injecting a specially created executable script into the operating system...
The vulnerability in the implementation of the Certificate Enrollment Protocol (SCEP) protocol in the PAN-OS operating system allows a perpetrator to execute any code with root privileges.
The vulnerability of the Certificate Enrollment Protocol SCEP implementation in the PAN-OS operating system exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor, operating remotel...
The vulnerability of the microprogramming software used in Diebold-Nixdorf CMDv5 dispensers allows a perpetrator to install an outdated or modified version of the microprogramming software in order to bypass encryption and dispense cash.
The vulnerability of the microprogramming software used in Diebold-Nixdorf CMDv5 dispensers relates to the possibility of bypassing security mechanisms. Exploiting this vulnerability allows an intruder to install an outdated or modified version of the microprogramming software, thereby...
The vulnerability of the database update module of the WorkFlow system in the Engineering Data Management and Product Lifecycle Management system LOCMAN:PLM lies in the possibility of unlimited loading of dangerous files, allowing attackers to execute arbitrary code.
The vulnerability of the database update module of the LOCsman:PLM engineering data and product lifecycle management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow an attacker to execute arbitrary code by replacing the dll library version.dl...
The vulnerability of the microprogramming software for Schneider Electric Modicon Quantum and Schneider Electric Modicon M340 allows a hacker to obtain information about the SMTP server configuration, including user logins and passwords.
The vulnerability of the microprogramming software in Schneider Electric Modicon Quantum and Schneider Electric Modicon M340 controllers is related to security mechanism failures. Exploiting this vulnerability can allow attackers to obtain information about the SMTP server configuration, includin...
The vulnerability of JunOS operating systems in routers from the QFX10K Series, EX9200 Series, ACX Series, MX Series, and PTX Series, allows attackers to increase their privileges.
The vulnerability of JunOS operating systems in routers from the QFX10K Series, EX9200 Series, ACX Series, MX Series, and PTX Series is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Win32k.sys component of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Win32k.sys component of the Windows operating system is related to errors in call handling. Exploiting this vulnerability can allow an attacker to enhance their privileges by running a specially created application...
The vulnerability of the programmatically defined Cisco SD-WAN network, related to the execution of operations outside the buffer in memory, allows attackers to enhance their privileges and gain unauthorized access to protected information.
The vulnerability of the programmatically defined Cisco SD-WAN network relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and gain unauthorized access to protected information...
Vulnerability in the antivirus component of the Secret Net Studio information protection system, allowing a perpetrator to trigger a service failure
The vulnerability in the antivirus component of the Secret Net Studio information protection system is related to buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...