97943 matches found
GnuTLS Heap Buffer Overflow DoS
The vulnerability of the wrapnettlehashfast function implementation in the GnuTLS cryptographic library is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Microsoft Exchange Server Code Execution
The vulnerability of Microsoft Exchange Server is related to errors in code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
tcpdump Buffer Overflow Information Disclosure
The vulnerability of the tcpdump tool for capturing and analyzing network traffic arises due to buffer overflow. Exploiting this vulnerability can allow a hacker to disclose sensitive information using a specially created pcap file...
IOFireWireAVC Kernel Privilege Escalation
The vulnerability of the IOFireWireAVC component in the Mac OS X operating system is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability allows an attacker to execute arbitrary code with kernel privileges through a specially created...
ProtonVPN Service Code Execution
The vulnerability of the ProtonVPN service is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands with SYSTEM privileges using a single OpenVPN command line...
Raw-image converter DNG Code Execution
The vulnerability of the Raw-image conversion to DNG format in DNG Converter arises from the occurrence of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure due to a memory corruption...
Cyrus IMAP Information Disclosure
The vulnerability of the indexurlfetch function index.c in the Cyrus IMAP server is due to buffer overflow. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain confidential information or possibly cause other adverse effects...
SUSE Linux Enterprise Compromise Protected Information
The kernel-kdumppae-debuginfo package of the SUSE Linux Enterprise operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Gentoo Linux Remote Compromise
Multiple vulnerabilities exist in the openssl package up to version 0.9.8l-r2 of the Gentoo Linux operating system. Exploitation of these vulnerabilities may lead to the compromise of the integrity and accessibility of protected information. These vulnerabilities can be exploited remotely...
Shtab Project Access Control Unauthorized Access
The vulnerability of the Shtab project and task management service is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...
CodeScoring Template Code Execution
The vulnerability of the CodeScoring software development platform lies in the lack of measures to neutralize special elements within the template creation mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Telecom MG Code Execution
The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
OpenSky Flight Planning Unrestricted File Execution
The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...
DIAFAN.CMS SQL Injection
The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Linux net/mctp/route.c mctp_flow_prepare_output Heap Buffer Overflow DoS
The vulnerability of the mctpflowprepareoutput function in the net/mctp/route.c module of the Linux kernel is related to deficiencies in the deserialization mechanism, due to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker to compromise the...
Linux netfilter API DoS
The vulnerability in the net/netfilter/nftablesapi.c component of the Linux operating system is related to the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability can allow an attacker to cause a service failure...
GitHub Enterprise Server Disclosure
The vulnerability of the final download point of the corporate version of the GitHub Enterprise Server is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
Brokering File System Privilege Escalation
The vulnerability of the Brokering File System BFS in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
OpenClaw Code Execution
The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to the lack of validation for the correctness of the requests received. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the system and execute...
KLogic SCADA KASKAD Unauthorized Access
The vulnerability of the KWebVision web visualization module in the “KASKAD” SCADA system relates to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...
TOTOLINK N350R Form SysCmd Command Execution
The vulnerability of the /boafrm/formSysCmd component of the TOTOLINK N350R router’s microprogramming system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
AEM Forms XML External File Read
The vulnerability of the corporate platform for creating, managing, and processing electronic forms, documents, and business processes within Adobe Experience Manager AEM Forms on JEE is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could...
Django Error Reporting Data Compromise
The vulnerability of the Django web application framework is related to shortcomings in the error reporting mechanism. Exploiting this vulnerability allows an attacker to compromise the confidentiality of the information being protected...
Linux driver module Heap Buffer Overflow DoS
The vulnerability of the driver module comedi/drivers/das16m1.c in the Linux operating system is related to a violation of the buffer’s initial boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...
Framework Android Privilege Escalation
The vulnerability of the Framework component in the Android operating system relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to increase their privileges...
TOTOLINK CA300-PoE Router Arbitrary Command Execution
The vulnerability of the CloudSrvUserdataVersionCheck function in TOTOLINK CA300-PoE router’s software lies in the lack of measures taken at the control level during the processing of the url parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sendin...
SonicWall SMA Network Firewall Access Control File Deletion
The vulnerability of SonicWall SMA 100 network firewall microprogramming software is related to the lack of access control over critical files and directories. Exploiting this vulnerability could allow a remote attacker to delete any file and reset the system to its factory settings...
pdf.js Library Arbitrary JavaScript Execution
The vulnerability of the pdf.js library on the MFlash secure data exchange platform is related to the lack of protective measures for the web page structure. Exploiting this vulnerability could allow an attacker to execute arbitrary JavaScript code remotely...
IBM Concert Software Information Disclosure
The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in the fact that it allows unauthorized parties to access system data within the controlled area. Exploiting this vulnerability could enable attackers to disclose protected information remotely...
Ivanti EPM SQL Injection
The vulnerability of the Ivanti EPM endpoint management software relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a remote attacker to execute malicious code remotely...
ocfs2 Privilege Escalation
The vulnerability of the ocfs2 component in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...
Intel Neural Compressor Privilege Escalation
The vulnerability of the Intel Neural Compressor library for optimizing machine learning models is related to errors in processing input data. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...
Tenda wireless access point software frommacFilterModify Heap Buffer Overflow DoS
The vulnerability of the frommacFilterModify function in the /goform/operateMacFilter microprogramming system for the wireless access point Tenda is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrar...
intel-sdw-acpi DoS
The vulnerability of the intel-sdw-acpi component of the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
mp3_dmx_process Heap Buffer Overflow DoS
The vulnerability of the mp3dmxprocess function on the GPAC multimedia platform is related to buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
ClusterLabs Booth’s high-Data Compromise ClusterLabs Booth’s high-
The vulnerability of the gcrymdgetalgodlen function in ClusterLabs Booth’s high-availability cluster management and monitoring software is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker operating remotely to generate invalid HMACs...
Oracle Complex Maintenance Repair DoS
The vulnerability of LOV components in terms of technical maintenance, repairs, and major overhauls of Oracle system equipment exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to read, modify, add, or...
Mastodon LDAP Authentication Bypass
The vulnerability of the LDAP protocol implementation in Mastodon’s web application for deploying distributed social networks is related to the lack of a mechanism for verifying the source of data. Exploiting this vulnerability allows a malicious actor to bypass the authentication process...
mDNSResponder MAC Address Tracking
The vulnerability of the mDNSResponder component in operating systems such as watchOS, iOS, iPadOS, and tvOS is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to track a device based on its MAC address via Wi-Fi...
Kofax PowerPDF Advanced Heap Overflow
The vulnerability of the Kofax PowerPDF Advanced software for creating, converting, editing, and publishing PDF files is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Moodle XSS
The vulnerability in the virtual learning environment Moodle exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
Faronics Insight Enhanced Security Bypass Code Execution
The vulnerability of the Enhanced Security mode of the Teacher Console and Student Console on the Faronics Insight computer network management platform is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to circumvent...
Icinga Web 2 Code Execution
The vulnerability of the Icinga Web 2 PHP framework lies in the shortcomings of pathname limitation. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
Microsoft Office Data Protection Unauthenticated Access
The vulnerabilities of Microsoft Office packages, Microsoft 365 Apps for Enterprise, Microsoft SharePoint, Microsoft Excel, and Microsoft Office Web Apps Server are related to the lack of protection for sensitive data. Exploiting these vulnerabilities can allow attackers to gain unauthorized acce...
GitLab Permission Assignment Code Execution
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability allows an attacker to execute arbitrary code...
HP PageWide Printer DoS
The vulnerability of HP PageWide and HP PageWide Pro printer software-related microprograms is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
HPE OneView Authentication Bypass
The vulnerability of the HPE OneView IT infrastructure management system is related to authentication errors. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...
Modbus TCP DoS
The vulnerability of the Modbus TCP protocol implementation in microprogrammed logic controllers from Schneider Electric, such as Modicon M340, M580, MC80, Modicon Momentum MDI, and Legacy Modicon Quantum/Premium, is related to a potential integer overflow. Exploiting this vulnerability could all...
VMware Workspace One Access Path Traversal
The vulnerability of the VMware Workspace One Access application management platform, the VMware Identity Manager administration console, and the VMware vRealize Automation virtual infrastructure management tools is related to an incorrect limitation on the path name to the restricted directory...
Oracle WebCenter Forms Recognition Designer Unauthorized Access
The vulnerability of the Designer sub-component of the Oracle WebCenter Forms Recognition software platform is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to read, modify, or add data, or cause a service...