92920 matches found
The vulnerability of the “User” module in the Ansible configuration management system, related to the disclosure of data transmitted as parameters to the ssh-keygen utility, allows a hacker to gain unauthorized access to user-sensitive information.
The vulnerability of the “User” module in the Ansible configuration management system is related to the exposure of data transmitted as parameters to the ssh-keygen utility. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to user-sensitive information through a...
Vulnerability of the Server component: The Oracle MySQL Server database management system’s partitioning scheme allows attackers to gain unauthorized access to protected data or cause service failures.
Vulnerability of the Server component: The Oracle MySQL Server database management system’s partitioning scheme is vulnerable due to lack of access control mechanisms. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected data or cause service failures...
The vulnerability of Siemens’ PROFINET DCP software, related to insufficient validation of input data, allows a intruder to trigger a service failure.
The vulnerability of Siemens’ PROFINET DCP software is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures in the local Ethernet segment using specially crafted PROFINET DCP packets...
The vulnerability of the distributed Git version control system, related to insufficient validation of input data, allows a hacker to execute arbitrary operating system commands.
The vulnerability of the distributed Git version control system is related to the use of insecure Perl scripts for supporting subcommands such as cvsserver. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands on behalf of the git user remotely...
The vulnerability of the FFmpeg multimedia library, which allows a hacker to perform recording beyond the memory limit
The vulnerability of the FFmpeg multimedia library arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to perform write operations beyond the memory boundaries, related to the function ffh264SliceContextInit in libavcodec/h264dec.c...
The vulnerability of the initial loader for Motorola’s Android operating system allows a hacker to execute arbitrary code.
The vulnerability of the initial loader of the Motorola Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Android operating system, which allows a hacker to execute arbitrary code (memory corruption).
The vulnerability of the libavc component in the Android MediaServer operating system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely, using a specially crafted media fil...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the kernel-image-2.6.8-3-itanium operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerabilities of Firefox ESR and Firefox, the rendering software Graphite 2, allow attackers to induce service failures or exert other effects.
The vulnerability of the graphite2::FileFace::gettablefn function in Firefox ESR and Firefox browsers, as well as in the Graphite 2 rendering software, means that memory is not initialized for special data structures. Exploiting this vulnerability can allow a malicious actor to cause service...
The vulnerability of the Ruby on Rails software platform, which allows attackers to circumvent existing access control policies
The vulnerability in the nestedattributes.rb file of the activerecord/lib/activerecord module in the Ruby on Rails software framework is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to bypass existing access restrictions by using nested attributes ...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the libedataserverui1.2-6 package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the kernel-headers-2.4.27-4-sparc64-smp Debian GNU/Linux operating system can lead to a violation of the accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...
Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the kernel-doc-2.6.9 package of the Red Hat Enterprise Linux operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the Debian GNU/Linux operating system that allow a local attacker to compromise the confidentiality of protected information
The libnm-util-dev package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to violations of the confidentiality of protected information. These vulnerabilities can be exploited by local malicious individuals who have completed...
The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager lies in the lack of a mechanism for verifying input data during backup scenarios. This allows a malicious actor to execute arbitrary code with SYSTEM privileges.
The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to deficiencies in the mechanism for verifying input data during backup scenario execution. Exploiting this vulnerability could allow an attacker, operating...
The vulnerability of the Extensible Messaging Client Protocol (XMCP) in Cisco IOS and Cisco IOS XE operating systems allows a perpetrator to induce a service failure.
The vulnerability of the Extensible Messaging Client Protocol XMCP in Cisco IOS and Cisco IOS XE operating systems lies in the lack of input validation for cyclic operations. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the automatic software update mechanism of the ViPNet Client 4 system, related to deficiencies in handling relative paths, allows a malicious intruder from a neighboring trusted network to compromise the integrity of the operating environment. This vulnerability enables the intruder to gain privileges in the attacked node’s system and execute arbitrary code using a specially crafted update package sent from a compromised network node with the role of a network management center.
The vulnerability of the automatic software update mechanism of the ViPNet Client 4 lies in the deficiencies in the handling of relative paths. Exploiting this vulnerability can allow a perpetrator operating from a neighboring trusted network to compromise the integrity of the operating...
The vulnerability of the DHCP Client Service for Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the DHCP Client Service for Windows operating systems is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Microsoft Defender Antimalware Platform, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.
The vulnerability of Microsoft Defender Antimalware Platform relates to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
The vulnerability of the z_erofs_lzma_head() function in the Linux operating system allows a hacker to compromise the accessibility of protected information.
The vulnerability of the zerofslzmahead function in the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
The vulnerability of the JIT-compiler of Google Chrome’s Turbofan browser allows a hacker to execute arbitrary code.
The vulnerability of the JIT-compiler of Google Chrome’s Turbofan browser is related to access to resources through incompatible types. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Drupal CMS system’s kernel, related to improper code generation, allows attackers to execute arbitrary code.
The vulnerability of the Drupal CMS system’s kernel is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability in the _rtw_join_timeout_handler() function of the drivers/staging/rtl8723bs/core/rtw_mlme.c module allows a hacker to trigger a service failure. This vulnerability enables a hacker to exploit additional devices in the Linux operating system’s kernel support.
The vulnerability of the rtwjointimeouthandler function in the drivers/staging/rtl8723bs/core/rtwmlme.c module relates to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of authentication mechanisms, which allow attackers to circumvent security restrictions.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass security restriction...
The vulnerability of the tg_tag_type() function in the prdbg.c component of the GNU Binutils development environment allows a hacker to induce a service failure.
The vulnerability of the tgtagtype function in the prdbg.c component of the GNU Binutils development environment is related to an unvalidated return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Pi-hole advertising blocking app arises from the failure to take measures to neutralize special elements used in the operating system’s command set. This allows a violator to execute arbitrary code.
The vulnerability of the Pi-hole ad-blocking application is related to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the User Management Component (UMC) in the web-based industrial process management system SIMATIC PCS neo allows a attacker to trigger a service failure.
The vulnerability of the User Management Component UMC in the web-based system for managing technological processes of SIMATIC PCS neo is related to the violation of the buffer’s initial limit. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure...
The vulnerability of the `cs_dspctl_cache_init_multiple_offsets` function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the csdspctlcacheinitmultipleoffsets function in the Linux operating system’s kernel is related to unlimited resource allocation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the setIpPortFilterRules function in TOTOLINK A3100R router software allows a intruder to trigger a service failure.
The vulnerability of the setIpPortFilterRules function in TOTOLINK A3100R router microprogramming software is related to buffer overflows in the stack when processing the comment parameter. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially...
The vulnerability of the p54_rx_eeprom_readback() function in the Linux kernel’s Wi-Fi component allows a hacker to induce a service failure.
The vulnerability of the p54rxeepromreadback function in the Linux kernel’s Wi-Fi component involves copying buffers without checking the input data. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of Autodesk 3dsMax software for 3D modeling, animation, and visualization lies in the possibility of an operation going beyond the buffer boundaries in memory. This allows a malicious actor to execute arbitrary code or cause system failures.
The vulnerability of the software for 3D modeling, animation, and visualization in Autodesk 3dsMax relates to the execution of operations beyond the buffer boundaries in memory when processing TGA files. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause system...
The vulnerability of the OneDrive file sharing service for the macOS operating system arises from the insecure management of privileges, allowing an attacker to elevate their privileges to root user level.
The vulnerability of the OneDrive file sharing service for the macOS operating system is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root user level...
The vulnerability of the Adobe Substance 3D Viewer application, which allows for the viewing and editing of 3D files, stems from a pointer manipulation issue. This vulnerability allows an attacker to trigger a service failure.
The vulnerability of the Adobe Substance 3D Viewer application for viewing and editing 3D files is related to the handling of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafted malicious file...
The vulnerability of the corporate platform for creating, managing, and processing electronic forms, documents, and business processes within Adobe Experience Manager AEM Forms on JEE lies in its deserialization mechanism’s flaws, allowing attackers to execute arbitrary code.
The vulnerability of the corporate platform for creating, managing, and processing electronic forms, documents, and business processes within Adobe Experience Manager AEM Forms on JEE is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a maliciou...
The vulnerability of the Sherpa Orchestrator component of the Sherpa RPA process automation platform allows a attacker to execute cross-site scripting attacks.
The vulnerability of the Sherpa Orchestrator component of the Sherpa RPA process automation platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform XSS scripting across sites by sending specially crafted...
The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the possibility of an operation occurring outside the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of PDF viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the issue of operations going beyond the buffer in memory during the processing of U3D files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Linux operating system’s kernel NFS component, which allows a hacker to trigger a service failure
The vulnerability of the Linux operating system’s kernel NFS component is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the br_vlan_tunnel_lookup() function in the net/bridge/br_vlan_tunnel.c module, a component of the Linux kernel’s networking functions, allows a hacker to trigger a service failure.
The vulnerability of the brvlantunnellookup function in the net/bridge/brvlantunnel.c module, which is part of the Linux kernel’s networking functions, is related to the use of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerabilities of MobileHMI and IoTWorX Visualizer SCADA systems from GENESIS64 allow a intruder to gain unauthorized access to protected information.
The vulnerability of MobileHMI and IoTWorX Visualizer SCADA systems from GENESIS64 is related to incorrect restrictions on the path name to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the Cisco Webex web conferencing platform, which exists due to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.
The vulnerability of the Cisco Webex web conferencing platform exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
The vulnerability of the SQL concat_ws() function in the SQLite database management system, allowing a hacker to cause a service failure
The vulnerability of the SQL concatws function in the SQLite database management system is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure through the malloc parameter...
The vulnerability of VideoGrace video conference software, related to insufficient validation of input data, allows a perpetrator to cause service failures.
The vulnerability of VideoGrace video conferencing software is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the SNAP Lite component allows for manipulation of the control and monitoring systems in the energy and water supply sectors of SISCO MMS-EASE and AX-S4 ICCP, enabling a perpetrator to cause service interruptions.
The vulnerability of the SNAP Lite component in the system for managing and monitoring processes related to energy and water supply in SISCO MMS-EASE and AX-S4 ICCP is related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service...
The vulnerability of the resource_build_bit_depth_reduction_params() function in the DRI driver for AMD kernel-based Linux graphics cards allows a attacker to cause a service failure.
The vulnerability of the resourcebuildbitdepthreductionparams function in the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `alloc_tagging_slab_freehook()` function in the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.
The vulnerability of the alloctaggingslabfreehook function in the Linux kernel’s memory management subsystem is related to improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the NTPSyncWithHost() function in Totolink’s microprogrammed router software allows a hacker to execute arbitrary code.
The vulnerability of the NTPSyncWithHost function in Totolink router microprogramming software is related to the failure to take measures to neutralize special elements of the hostTime parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the formOneSidCfgSet function in the microprogramming software for Tenda AC500 allows a hacker to cause a service failure.
The vulnerability of the formOneSidCfgSet function in the Tenda AC500 router’s microprogramming software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the PHP library TCPDF, related to incorrect pathname restrictions for restricted access directories, allows attackers to gain unauthorized access to protected information.
The vulnerability of the PHP library TCPDF lies in the incorrect path limitation for the access to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the /api/dev-console/proxy/internet file on the Red Hat OpenShift Container Platform corporate platform allows a attacker to perform an SSRF attack.
The vulnerability of the /api/dev-console/proxy/internet file on the Red Hat OpenShift Container Platform corporate platform is related to insufficient validation of requests at the server side. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...