97848 matches found
Mattermost SSRF
The vulnerability of the Mattermost instant messaging application is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...
CRM Individual Web Application Code Generation
Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...
Go Ed25519 Cryptographic Library Resource Initialization Failure
The vulnerability of the Ed25519 cryptographic library in the Go language is related to incorrect initialization of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...
Next.js DoS
The vulnerability of the Next.js software platform for creating web applications is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
CS-Cart Multi-Vendor Authentication Bypass
The vulnerability of the CS-Cart Multi-Vendor software for electronic shopping platforms relates to the bypassing of authentication using a user-controlled key. Exploiting this vulnerability allows an attacker to remotely compromise the integrity and accessibility of protected information...
Sublime Text .dylib Code Execution
The vulnerability of the .dylib file of the Sublime Text text editor on the Mac OS operating system is related to an uncontrolled search path element. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Autodesk 3dsMax Buffer Overflow
The vulnerability of the software for 3D modeling, animation, and visualization in Autodesk 3dsMax relates to the execution of operations beyond the buffer boundaries in memory when processing TGA files. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause system...
DDK Toolset Unauthenticated Access Disclosure
The vulnerability of the rgxfwwriterobustnessbuffer function in the Driver Development Kit DDK toolset is related to context privilege switching errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Microsoft Visual Studio Code Python Extension Code Execution
The vulnerability of the Microsoft Visual Studio Code Python Extension is related to a breach of trust boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Page and Field Configuration
The vulnerability of the Page and Field Configuration components in the PeopleSoft Enterprise CC Common Application Objects business process management tool from the Oracle PeopleSoft Products family is related to deficiencies in access control. Exploiting this vulnerability could allow an attack...
Linux pci-epf-mhi Component DoS
The vulnerability of the pci-epf-mhi.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
Zabbix universal monitoring system XSS
The vulnerability of the Zabbix universal monitoring system’s web interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack by manipulating the backurl parameter...
Adobe After Effects Heap Buffer Overflow
The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the ability to write beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
D-Link DIR-816A Router Code Execution
The vulnerability of the form2WlAc.cgi script of the D-Link DIR-816A2 router’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTTP POST request...
SMEM Partition Disclosure
The vulnerability of the SMEM microprogramming software for Qualcomm processors lies in reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
Avigilon VideoIQ iCVR HD Path Traversal
The vulnerability of the Microprogrammed Software of the Avigilon VideoIQ iCVR HD camera is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to disclose protected information...
Portal for ArcGIS File Path Disclosure
The vulnerability of the Portal for ArcGIS is related to improper external management of the file name or path. Exploiting this vulnerability can allow a malicious actor to disclose protected information through a specially created web page...
virtio-net QEMU DoS
The vulnerability of the virtio-net device emulation component in QEMU is related to the operation of writing data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to cause a system failure...
Squid Proxy Server DoS
The vulnerability of the Squid proxy server is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted ESI packets...
JetBrains YouTrack Plugin XSS
The vulnerability of the iframe plugin in the JetBrains YouTrack software environment relates to insufficient verification of the connection source. Exploiting this vulnerability allows an attacker to execute arbitrary JavaScript code and make unauthorized API requests...
Linux iommu/arm-smmu-v3 DoS
The vulnerability of the iommu/arm-smmu-v3 component in the Linux operating system is related to the lack of a mechanism to cancel registration when the device is disabled. Exploiting this vulnerability could allow an attacker to cause a service failure...
Opaque LSA Extended Link Parser Heap Buffer Overflow
The vulnerability of the ospfteparseextlink function in the Opaque LSA Extended Link Parser component of the networking routing implementation software for Unix-like systems is related to the escape operation from the buffer into memory. Exploitation of this vulnerability allows a remote attacker...
IBM QRadar SIEM Disclosure of Protected Information
The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to the disclosure of protected information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
XStore Plugin SQLi
The vulnerability of the XStore plugin of the WordPress content management system is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database...
Windows DNS Server RCE
The vulnerability of the Windows operating system’s DNS server is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Tenda AC10U formSetVirtualSer Buffer Overflow
The vulnerability of the formSetVirtualSer function in the Tenda AC10U router’s microprogramming software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of...
WebKit DNS Interception Private Relay
The vulnerability of the Web page rendering module in WebKit operating systems for macOS, iOS, and iPadOS is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to remotely intercept DNS requests with Private Relay enabled...
Royal Elementor Addons and Templates Plugin Code Execution
The vulnerability of the Royal Elementor Addons and Templates plugin of the WordPress content management system is related to the ability to download files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by downloading ...
ProFTPD Memory Release Unauthorized Access
The vulnerability of the ProFTPD FTP server is related to a memory release error. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Cobalt Ashlar-Vellum Code Execution
The vulnerability of the Cobalt Ashlar-Vellum software for parametric automated design and 3D modeling is related to an error in the analysis of AR files. Exploiting this vulnerability can allow attackers to execute arbitrary code...
BTCPay Server Open Redirection
The vulnerability of the automated Bitcoin payment processing system, BTCPay Server, is related to the use of open redirection when processing the parameter returnUrl=. Exploiting this vulnerability allows a remote attacker to carry out phishing attacks using a specially created malicious link...
overwrite.config.php Spoofing
The vulnerability of the overwrite.config.php script, where $domain is used for the web application’s data synchronization with ownCloud, is related to configuration errors when processing the OWNCLOUDDOMAIN variable. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...
Rocket getUsersOfRoom Sensitive Information Exposure
The vulnerability of the getUsersOfRoom method in the server-based corporate messaging system that supports file sharing and video conferences in Rocket. Chat involves insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive informatio...
MariaDB create_worker_threads DoS
The vulnerability of the createworkerthreads method in the MariaDB database management system exists due to improper cleanup or resource release. Exploiting this vulnerability can allow an attacker to cause service failures...
Microsoft SQL Server Code Execution
The vulnerability of the Microsoft SQL Server relational database management system is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted SQL query remotely...
NETGEAR Router Command Injection
The vulnerability of NETGEAR’s integrated routing software modules—AC2100, AC2400, AC2600, D7000, R6220, R6230, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450—is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a...
NETGEAR Integrated Routing Software Command Injection
The vulnerability of NETGEAR’s integrated routing software, including models like RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, stems from the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Adobe DNG Software Development Kit Buffer Overflow Information Disclosure
The vulnerability of the Adobe DNG Software Development Kit’s file reading and writing software relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to disclose protected information using a specially crafted file...
libscp_v0.c Stack Buffer Overflow DoS
The vulnerability of several functions in libscpv0.c affects the RDP server xrdp. It involves buffer overflow in the data stack buffer. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...
DHCP Clients Integer Overflow DoS
The vulnerability of DHCP clients that use UNIX command-line utilities with BusyBox is related to integer overflows. Exploiting this vulnerability allows a remote attacker to cause a service failure by using a domain name with the RFC1035 encoding...
Microsoft Research JavaScript Cryptography Library Unauthorized Access
The vulnerability of the implementation of the elliptic curve-based cryptography method in Microsoft Research’s JavaScript Cryptography Library is related to incorrect calculations. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...
PDFium PDF Content Processor Code Execution
The vulnerability of the PDFium PDF-content processor in Google Chrome browsers relates to the writing beyond the buffer memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created PDF file...
ChakraCore Memory Object Handling Code Execution
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...
WIFICAM IP cameras Pre-installed Accounts Root Access
The vulnerability of the authentication service for WIFICAM microprogrammed software cameras relates to the use of pre-installed accounts. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the root account through a TELNET connection...
Gentoo Linux Remote Compromise
The multiple vulnerabilities in the lcms package up to version 1.18-r1 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Red Hat Enterprise Linux Compromise Protected Information
The vulnerability of the libpurple-tcl-2.6.3 package on the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...
IAM Proxy Component Compromise Information Disclosure
The vulnerability of the IAM Proxy component of the Identity & Access Management tool in Platform V IAM is related to synchronization errors when using a common resource. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
CRM Platform Unlimited Resource Abuse
The vulnerability of the platform for creating individual web applications in CRM involves unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...
MaxPatrol EDR DoS
The vulnerability of the control console of the MaxPatrol EDR detection and response system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...
KOMTEK Cassa Kurier Module Authentication Bypass
Vulnerability of the “KOMTEK Cassa Kurier” module of the 1C-Bitrix content management system: Website management is associated with the absence of authentication for a critical function. Exploitation of this vulnerability may allow an attacker to compromise the integrity and accessibility of...