The vulnerability of the Passwork password manager lies in the improper implementation of the sequence of actions required for processing tasks. This allows attackers to compromise the integrity of the protected information.

The vulnerability of the Passwork password manager is related to the incorrect implementation of the sequence of actions performed. Exploiting this vulnerability allows a malicious actor, operating remotely, to compromise the integrity of the protected information...

The vulnerability of the mwifiex_process_rx_packet() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mwifiexprocessrxpacket function in the Linux operating system is related to reading beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Kernel Streaming Service driver for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kernel Streaming Service driver for Windows operating systems is related to buffer overflows in the “bucket”. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the universal monitoring system Zabbix, related to the replacement of an unreliable indicator, allows a intruder to execute arbitrary code.

The vulnerability of the Zabbix universal monitoring system lies in the ability to directly modify memory pointers in the JavaScript engine. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Frames component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the Frames component in Google Chrome and Microsoft Edge is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the Sidekiq framework for handling background tasks in web applications relates to the lack of security measures for protecting the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability of the Sidekiq framework for handling background tasks in web applications is related to the lack of security measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the XStore plugin of the WordPress content management system allows a hacker to execute arbitrary SQL queries against the database.

The vulnerability of the XStore plugin of the WordPress content management system is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database...

The vulnerability of the `compileClient`, `compileFileClient`, and `compileClientWithDependenciesTracked` templates for generating Pug markup (formerly Jade) allows attackers to execute arbitrary code.

The vulnerability of the compileClient, compileFileClient, and compileClientWithDependenciesTracked functions of the Pug template for generating HTML markup formerly Jade is related to improper code generation control. Exploiting this vulnerability could allow a remote attacker to execute arbitra...

The software of the centralized backup and disaster recovery system of Dell PowerProtect Data Manager is vulnerable due to a flaw in the mechanism for recovering forgotten passwords. This vulnerability allows an intruder to gain unauthorized access to the application.

The software of the centralized backup and disaster recovery system Dell PowerProtect Data Manager has a vulnerability due to a flaw in the mechanism for recovering forgotten passwords. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the...

The vulnerability of the CRI-O Container Engine’s application programming interface, a software platform for managing clusters of virtual machines in Kubernetes, relates to the distribution of resources without any restrictions or controls. This allows a malicious actor to trigger service failures.

The vulnerability of the CRI-O Container Engine’s application programming interface, a software platform for managing clusters of virtual machines in Kubernetes, is related to an experimental exploit that allows containers to become unlimited in size. Exploiting this vulnerability could enable a...

The vulnerability of the package processor on the MailSherlock audit platform, which allows a hacker to execute arbitrary SQL queries.

The vulnerability of the packet handler on the MailSherlock email audit platform relates to the lack of security measures for handling SQL query structures. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL queries...

The vulnerability of cloud-based software for creating and using Nextcloud Server’s data storage system is related to improper access control. This allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of cloud-based software for creating and using Nextcloud Server storage solutions is related to improper access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of NVIDIA’s SBIOS system, specifically the DGX A100 server, allows a hacker to trigger a service failure.

The vulnerability of NVIDIA’s SBIOS system, specifically the DGX A100 server, is related to incorrect dynamic analysis of variables. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the UploadFirmwareFile function (/cgi-bin/cstecgi.cgi) in the Totolink N200RE router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the UploadFirmwareFile function /cgi-bin/cstecgi.cgi in the Totolink N200RE router microprogramming system exists due to the failure to implement measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of programming tools for monitoring and managing network infrastructure Hitachi JP1/Performance Management lies in the default access settings, which allow a perpetrator to gain access to files and directories.

The vulnerability of software tools for monitoring and managing network infrastructure of Hitachi JP1/Performance Management is related to the default access settings. Exploiting this vulnerability can allow attackers to gain access to files and directories...

Vulnerability of the landing module of the content management system (CMS) for 1C-Bitrix: A website management tool that allows a hacker to execute OS commands on a vulnerable node, gain control over resources, and penetrate the internal network.

Vulnerability of the landing module of the CMS system: Website management is triggered by synchronization errors when using a common resource. Exploiting this vulnerability allows a malicious actor to remotely execute OS commands on a vulnerable node, gain control over resources, and penetrate th...

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the Enhanced Security mode of the Teacher Console and Student Console on the Faronics Insight computer network management platform allows a perpetrator to bypass security restrictions, gain unauthorized access to protected information, or execute arbitrary codes.

The vulnerability of the Enhanced Security mode of the Teacher Console and Student Console on the Faronics Insight computer network management platform is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to circumvent...

The vulnerability of the Open5GS GTP library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Open5GS GTP library is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures during the analysis of extension headers in GPRS tunneling protocol messages GPTv1-U...

The vulnerability of the recovery mechanism of G Data antivirus software allows attackers to enhance their privileges.

The vulnerability of the file recovery mechanism of the G Data antivirus software is related to incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

The vulnerability of the SAP Customer Data Cloud data management software lies in the use of a non-safe random number generator program, which allows an attacker to disclose sensitive information.

The vulnerability of the SAP Customer Data Cloud data management software is related to the use of a non-safe random number generator program. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose sensitive information...

The vulnerability of the `cv::RBaseStream::setPos` function in the `modules/imgcodecs/src/bitstrm.cpp` file of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, allows a attacker to cause a service failure.

The vulnerability of the cv::RBaseStream::setPos function in the modules/imgcodecs/src/bitstrm.cpp file of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, relates to an improper conversion from a 64-bit integer to a 32-bit integer...

The vulnerability of the encode_structured_data method in the PyPI eth-account package allows a attacker to cause a service failure.

The vulnerability of the encodestructureddata method in the PyPI package eth-account is related to incorrect data input used as a condition for loop execution. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the AVEVA Edge SCADA system, related to the uncontrolled element in the search process, allows a intruder to execute arbitrary commands or increase their privileges.

The vulnerability of the AVEVA Edge SCADA system is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a hacker to execute arbitrary code or increase their privileges...

The vulnerability of the Manage Proxies component of the Oracle E-Business Suite automation system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Manage Proxies component of the Oracle E-Business Suite automation system exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP...

The vulnerability of the URL_GetProtocolType function in the MP4Box multimedia platform’s command allows a hacker to induce a service failure.

The vulnerability of the URLGetProtocolType function in the MP4Box multimedia platform of GPAC is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to cause service failures using a specially created file...

The vulnerability of the function DL_Dxf::handleLWPolylineData in the DXF file parsing library Dxflib allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the function DLDxf::handleLWPolylineData in the DXF file parsing library Dxflib is related to writing outside the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures usin...

The vulnerability of the IOMobileFrameBuffer function in the operating system kernels of iOS, iPadOS, and macOS allows a hacker to execute arbitrary code.

The vulnerability of the IOMobileFrameBuffer function in operating system kernels of iOS, iPadOS, and macOS relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of Microsoft Windows Defender operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Microsoft Windows Defender operating systems is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

The vulnerabilities of NETGEAR Wi-Fi router microprogramming systems, such as AC2400, AC2600, D7000, R6020, R6080, R6120, R6220, R6230, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450, are related to authentication process flaws, which allow attackers to exploit these vulnerabilities to gain increased privileges.

The vulnerabilities of NETGEAR Wi-Fi router software models AC2400, AC2600, D7000, R6020, R6080, R6120, R6220, R6230, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450 are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can...

The vulnerability of the sub_80046EB4 (/formSetPortTr) function in the D-Link DIR-809 wireless router’s microprogramming software allows a hacker to execute arbitrary code on the target system.

The vulnerability of the sub80046EB4 /formSetPortTr function in the wireless router software from D-Link, the DIR-809, is related to stack buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code within the system using the created POST request...

The vulnerability of the HgDriver component of the PHP Composer dependency manager relates to the implementation or modification of arguments, allowing attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the HgDriver component in the PHP Composer dependency manager is related to improper cleaning of Mercurial repository URLs. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures through the...

The vulnerability of the production automation system’s System Platform, related to the storage of confidential information in unencrypted form, may allow a hacker to gain access to user account data.

The vulnerability of the production automation system’s platform lies in the storage of confidential information in an unencrypted form. Exploiting this vulnerability could allow attackers to gain access to user account information...

The vulnerability of the User Interface component of the Oracle Trade Management application, a part of the Oracle E-Business Suite, allows an attacker to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the User Interface component of the Oracle Trade Management application, part of the Oracle E-Business Suite, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or to...

The vulnerability of JunOS operating systems in routers from the QFX10K Series, EX9200 Series, ACX Series, MX Series, and PTX Series, allows attackers to increase their privileges.

The vulnerability of JunOS operating systems in routers from the QFX10K Series, EX9200 Series, ACX Series, MX Series, and PTX Series is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Sample apps component of the Oracle WebLogic Server application server allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Sample apps component of the Oracle WebLogic Server application server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or to modify, add, or...

The vulnerability of the RemoteFX vGPU component in the Microsoft Hyper-V hardware virtualization system’s operating system Windows allows a attacker to execute arbitrary code.

The vulnerability of the RemoteFX vGPU component in the Microsoft Hyper-V hardware virtualization system’s operating system Windows exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted...

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a attacker to execute arbitrary SQL queries.

The vulnerability in the vManage web interface of the Cisco SD-WAN programmatically defined network is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

The vulnerability of the message filtering function of Cisco AsyncOS software for Cisco Email Security Appliances and Cisco Content Security Management Appliances allows a attacker to cause a service failure.

The vulnerability of the message filtering function in Cisco AsyncOS software for Cisco Email Security Appliances and Cisco Content Security Management Appliances exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruption...

The vulnerability of the Connector Framework component of the Enterprise Manager Base Platform allows a perpetrator to gain access to modify, add, or delete data, to gain unauthorized access to protected information, or to cause service failures.

The vulnerability of the Connector Framework component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected information...

Vulnerability of the software complex: Regional electronic budget. The integration platform, which is related to the shortcomings of the mechanism for limiting the number of authentication attempts, allows a violator to select a user password.

Vulnerability of the software complex: Regional electronic budget. The integration platform is connected to the shortcomings of the mechanism for limiting the number of authentication attempts. Exploiting this vulnerability can allow a malicious actor to select a user password remotely...

The vulnerability of the extract_status_code function in the Keepalived network traffic balancing system, which allows a attacker to cause a service failure

The vulnerability of the extractstatuscode function in the keepalived network traffic balancing system’s lib/html.c file is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of Microsoft SharePoint Foundation and the Microsoft SharePoint Server software suite relates to deficiencies in access control. This allows attackers to carry out cross-site scripting attacks and increase their privileges.

The vulnerability of Microsoft SharePoint Foundation and the Microsoft SharePoint Server software suite is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks and increase their privileges by using a specially...

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from incorrect validation of input data, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems is related to improper validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted files in the Advanced Recording...

The vulnerability of the Dr.Web Enterprise Security Suite antivirus protection, related to errors in the proprietary protocol’s operation, allows a hacker to replace the installation file.

The vulnerability of the Dr.Web Enterprise Security Suite antivirus protection lies in errors in the proprietary protocol used to connect the antivirus components to the server. Exploiting this vulnerability allows a malicious actor to create a fake “Dr.Web Enterprise Security Suite” server withi...

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32k component in Windows operating systems exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the HTTP/2 server implementation in nginx allows a attacker to trigger a service failure.

The vulnerability of the HTTP/2 server implementation based on nginx is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the “User” module in the Ansible configuration management system, related to the disclosure of data transmitted as parameters to the ssh-keygen utility, allows a hacker to gain unauthorized access to user-sensitive information.

The vulnerability of the “User” module in the Ansible configuration management system is related to the exposure of data transmitted as parameters to the ssh-keygen utility. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to user-sensitive information through a...

Vulnerability of the Server component: The Oracle MySQL Server database management system’s partitioning scheme allows attackers to gain unauthorized access to protected data or cause service failures.

Vulnerability of the Server component: The Oracle MySQL Server database management system’s partitioning scheme is vulnerable due to lack of access control mechanisms. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected data or cause service failures...