97943 matches found
CRM Platform Unlimited Resource Abuse
The vulnerability of the platform for creating individual web applications in CRM involves unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...
MaxPatrol EDR DoS
The vulnerability of the control console of the MaxPatrol EDR detection and response system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...
KOMTEK Cassa Kurier Module Authentication Bypass
Vulnerability of the “KOMTEK Cassa Kurier” module of the 1C-Bitrix content management system: Website management is associated with the absence of authentication for a critical function. Exploitation of this vulnerability may allow an attacker to compromise the integrity and accessibility of...
golang-x-net Package Code Execution
The vulnerability of the golang-x-net package in the Golang programming language is related to improper checking of unsafe equivalence of input data. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and execute arbitrary code...
Remote Desktop Services RCE
The vulnerability of Remote Desktop Services RDS for Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Windows ALPC Privilege Escalation
The vulnerability of the Advanced Local Procedure Call ALPC in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
bpf_jit_prog_releaseother Heap Buffer Overflow DoS
The vulnerability of the bpfjitprogreleaseother function in the kernel/bpf/core.c module, which supports BPF interpreter for Linux kernel, relates to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Linux kernel iptfs_consume_frags Heap Buffer Overflow DoS
The vulnerability of the iptfsconsumefrags function in the net/xfrm/xfrmiptfs.c module, which is part of the Linux kernel’s networking functions, relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...
hp-bioscfg Kernel DoS
The vulnerability of the hp-bioscfg component in the Linux operating system’s kernel is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...
Keras Model Code Execution
The vulnerability of the Model.loadmodel function in the Keras library is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
BusyBox Privilege Escalation
The vulnerability of the UNIX command-line utility set of BusyBox is related to access control deficiencies. Exploiting this vulnerability can allow a remote attacker to increase their privileges...
NetScaler ADC Memory Read Bypass
The vulnerability of NetScaler ADC formerly Citrix ADC and the NetScaler Gateway access control system formerly Citrix Gateway relates to reading data beyond the allowed range in memory. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms by sending...
Online Store Authentication Bypass
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass security restriction...
Node.js RCE
The vulnerability of the Node.js software platform’s security mechanism is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code...
Access Controller Service Privilege Escalation
The vulnerability of the access controller service related to the Capability Access Management Service camsvc of Windows operating systems is associated with synchronization errors when using a shared resource “Race Conditions”. Exploiting this vulnerability can allow an attacker to increase thei...
Microsoft Office Unreliable Pointer Code Execution
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to an unreliable pointer assignment mechanism. Exploiting this vulnerability allows attackers to execute arbitrary code by sending a specially crafted malicious file...
Microsoft Exchange Server Privilege Escalation
The vulnerability of Microsoft Exchange Server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to increase their privileges remotely...
Mozilla Firefox Thunderbird Reverse DNS Resolver DoS
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the dependence of critical operations on the reverse DNS solution. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...
MediaStream Interface Code Execution
The vulnerability of the MediaStream interface in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially crafted HTML page...
setuptools Packaging Path Traversal
The vulnerability of the setuptools project’s packaging simplification library is related to an incorrect restriction on the path name for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to compromise the vulnerable system remotely...
MP4Box Heap Buffer Overflow DoS
The vulnerability of the gfodfac4cfgalternativeinfo function in the MP4Box utility of the GPAC multimedia platform is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...
Ruby Rack DoS
The vulnerability of the Ruby interpreter’s Rack module interface is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Linux kernel memory management Heap Buffer Overflow DoS
The vulnerability of the drainobjstock function in the mm/memcontrol.c module of the Linux kernel’s memory management subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to access protected information or cause service failur...
reNgine Operational Information Disclosure
The vulnerability of the reNgine software tool for automated web application reconnaissance is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...
PCMan FTP Server Buffer Overflow DoS
The vulnerability of the PCMan FTP Server relates to the execution of operations beyond the buffer boundaries in memory when processing the MDTM parameter. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...
TP-Link Tapo H200 Open Information Disclosure
The vulnerability of TP-Link Tapo H200 smart home control software relates to the storage of information in an open manner. Exploiting this vulnerability could allow a intruder to obtain Wi-Fi credentials...
lpfc_initial_flogi() Function Heap Buffer Overflow DoS
Vulnerability of the lpfcinitialflogi function in the drivers/scsi/lpfc/lpfcels.c module – The Linux SCSI device driver relies on the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
GraphQL Library Code Execution
The vulnerability of the GraphQL library for Ruby and the git-based software platform used for collaborative code development on GitLab CE/EE is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Ivanti Connect Secure Policy Secure XSS
The vulnerability of the Ivanti Connect Secure and Ivanti Policy Secure access control tools is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to enhance their privileges and perform cross-site scripting attacks...
Microsoft Word Office Suites Code Execution
The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise is related to the use of an untrusted pointer. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...
ABAP SAP NetWeaver Application Server ABAP Permission Bypass
Vulnerabilities in the software used for developing and executing applications in the ABAP language of SAP NetWeaver Application Server ABAP are related to the improper assignment of permissions to critical resources. Exploiting these vulnerabilities can allow attackers, operating remotely, to...
Billion M100 Authentication Bypass
The vulnerability of the microprogrammed software in industrial routers such as Billion M100, Billion M150, Billion M120N, and Billion M500 relates to the ability to bypass authentication procedures by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to...
qBittorrent SSL MITM
The vulnerability of the cross-platform BitTorrent client qBittorrent is related to incorrect verification of the SSL/TLS certificate authenticity. Exploiting this vulnerability allows a remote attacker to carry out a “man-in-the-middle” attack...
Training Information Security XSS
The vulnerability of software for training employees in information security skills is related to the lack of measures taken to protect website structures. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS by injecting malicious JavaScript code...
Demon Routing Protocol Daemon DoS
The vulnerability of the Demon Routing Protocol Daemon rpd in Junos OS and Junos OS Evolved lies in the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a specially crafted SNMP request...
esp-idf Anti-rollback Bypass
The vulnerability of the IoT application development environment loader espressif esp-idf is related to state management errors. Exploiting this vulnerability could allow an attacker to bypass anti-rollback protection mechanisms...
GE HealthCare EchoPAC Privilege Escalation
The vulnerability of GE HealthCare EchoPAC medical software is related to the incorrect granting of permissions for critical resources. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information, increase their privileges, or execute arbitrary code...
AutoGPT Code Execution
The vulnerability of the artificial intelligence tool AutoGPT exists due to the failure to address the issue of neutralizing specific elements used in the operating system’s command line. Exploiting this vulnerability allows a hacker to execute arbitrary code when using an instance of AutoGPT wit...
Huawei router software DoS Disclosure
The vulnerability of Huawei’s microprogrammed router software is related to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures or expose protected information...
HEIF file format decoder Find Exif Tag
The vulnerability of the findexiftag function in the HEIF file format decoder and encoder is related to a segmentation error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Zeek ICSNPP-Ethercat Buffer Overflow DoS
The vulnerability of the Zeek plugin for industrial system management protocols ICSNPP-Ethercat relates to the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or gain unauthorized access to protected information...
My Cloud OS Uncontrolled Resource Consumption
The vulnerabilities of the My Cloud OS, My Cloud Home, and My Cloud Home Duo network storage systems, as well as the SanDisk iBI device, are related to uncontrolled resource consumption. Exploiting these vulnerabilities can allow an attacker to cause service interruptions...
inet Wireless Daemon eapolauth_key_handle
The vulnerability of the eapolauthKeyHandle function in iNet Wireless demos is related to errors in implementing four-way handshakes. Exploiting this vulnerability allows a malicious actor to connect to a secure Wi-Fi network by sending a specially crafted message...
Ivanti Connect Secure Policy Secure Web Components
The vulnerability of the Ivanti Connect Secure and Ivanti Policy Secure web components related to access control vulnerabilities. Exploiting this vulnerability could allow a malicious actor to elevate their privileges to the level of an administrator...
PowerVR GPU Graphics Processing Unit Privilege Escalation
The vulnerability of the PMRChangeSparseMemOSMem driver in the PowerVR GPU graphics processing subsystem for Android and ChromeOS systems stems from the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to gain increased privileg...
Advantech EKI-1524 EKI-1522 EKI-1521 NTP Command Injection
The vulnerability of the microprogrammed software of Advantech EKI-1524, EKI-1522, and EKI-1521 lies in the ability to inject commands into the input field of the NTP server. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted POST request...
BIG-IP Improper Cryptographic Signature Privilege Escalation
The vulnerabilities of the BIG-IP Access Policy Manager, as well as of software solutions such as BIG-IP Advanced Firewall Manager, BIG-IP Advanced Web Application Firewall, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Application Visibili...
Keycloak XSS
The vulnerability of the Keycloak identity and access management software is related to deficiencies in the security measures protecting the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
Apache Airflow Kubernetes Provider Code Execution
The vulnerability of the Apache Airflow network software component, specifically the CNCF Kubernetes Provider, is related to deficiencies in the process of eliminating special elements from output data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Dompdf Code Execution
The vulnerability of the PHP library for generating PDF documents from HTML markup and CSS styles, Dompdf, is related to the occurrence of interpretation conflicts. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...