97943 matches found
EXIF Extension PHP Code Execution
The vulnerability of the PHP interpreter extension arises due to buffer overflows. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure through a JPEG image containing TIFF data...
GPAC MPEG-4 Decoder Data Compromise
The vulnerability of the MPEG-4 multimedia platform GPAC decoder’s functionality is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service...
mat5.c library Heap Buffer Overflow DoS
The vulnerability of the MatVarReadNextInfo5 function in the mat5.c library for reading and writing MATLAB MATIO files is related to integer overflow. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
TP-Link AC1750 Archer C20i Router Code Execution
The vulnerability of the web interface configuration of TP-Link AC1750 Archer C20i software lies in the lack of measures taken to neutralize special elements used in the operating system’s processing of the XTPExternalIPv6Address parameter. Exploiting this vulnerability allows a malicious actor t...
IOMobileFrameBuffer Code Execution
The vulnerability of the IOMobileFrameBuffer function in operating system kernels of iOS, iPadOS, and macOS relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Coturn Web Server Confidential Data Access
The vulnerability of the Coturn web server is related to improper validation of input data. Exploiting this vulnerability allows a remote attacker to access confidential data and compromise its integrity...
Google Chrome Skia Graphic Library Data Compromise
The vulnerability of Google Chrome’s Skia graphics library is related to the storage of data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
AppX Deployment Extensions Privilege Escalation
The vulnerability of AppX Deployment Extensions in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
IcedTea-Web Path Traversal
The vulnerability of the IcedTea-Web plugin is related to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to write arbitrary files to the device’s file system using a specially crafted file in formats: .tar, .jar, .war,...
Simatic IT Auth Bypass
The vulnerability in Simatic IT’s software is related to deficiencies in authentication mechanisms. Exploiting this vulnerability allows a malicious actor to bypass identity verification at the application level...
Product Diagnostic Tools Full Control
The vulnerability of the Product Diagnostic Tools component in the Order Management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the application...
Qualcomm Data Network Stack & Connectivity IPA Driver Privilege Escalation
The vulnerability of the IPA driver of the Qualcomm Data Network Stack & Connectivity operating system for Android, found in the CAF repository, relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...
Windows Server Code Execution
The vulnerability of the Windows Server operating system component in Mac OS X is caused by an overflow in memory buffers. Exploiting this vulnerability can allow an attacker to execute arbitrary code with system privileges or cause a service failure using a specially created application...
JavaScript ChakraCore Microsoft Edge Memory Corruption
The vulnerability of JavaScript ChakraCore and Microsoft Edge browsers is related to improper handling of objects in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with the privileges of the current user...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the hostap-modules-2.6.8-4-386 package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Local Data Compromise
The libnm-util-dev package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to violations of the confidentiality of protected information. These vulnerabilities can be exploited by local malicious individuals who have completed...
Platypus.js Auth Bypass Command Execution
The vulnerability of the Platypus.js platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
OpenSky Flight Planning Unrestricted File Execution
The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...
MariaDB Authentication Bypass Info Disclosure
The vulnerability of the MariaDB database management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Direct Rendering Infrastructure AMD Graphics Heap Buffer Overflow DoS
The vulnerability of the rascorerasinterruptdetected function in the driver/gpu/drm/amd/ras/rascore/rascore.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an...
Graphics component Firefox DoS
The vulnerability of the Graphics component in the Firefox web browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
PAK ViPNet Coordinator HW 4 Decompression Capabilities
Vulnerability of the automatic update mechanism for PAK ViPNet Coordinator HW 4, ViPNet Coordinator IG 4, and ViPNet xFirewall 5, related to excessive capabilities for decompressing updates. Exploiting this vulnerability allows a malicious actor, operating with a pre-compromised network managemen...
Windows Print Spooler Privilege Escalation
The vulnerability of the Windows Print Spooler in operating systems related to print queues is associated with buffer overflows in dynamic memory. Exploiting this vulnerability can allow attackers to gain increased privileges...
ViPNet Client Automatic Software Update Relative Path Privilege Escalation
The vulnerability of the automatic software update mechanism of the ViPNet Client 4 system is related to deficiencies in the handling of relative paths. Exploiting this vulnerability could allow a perpetrator operating from a neighboring trusted network to compromise the integrity of the operatin...
Google Chrome Media Sandbox Bypass
The vulnerability of the Media component in Google Chrome’s Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass the sandboxing mechanism by using a specially created HTML page...
Microsoft SharePoint Server Deserialization RCE
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Google Chrome V8 Engine Code Execution
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to deficiencies in access control in isolated environments. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Himmelblau Insecure Privilege Escalation
The vulnerability of the compatibility package for Microsoft Azure Entra ID and Intune – identified by Himmelblau – involves insecure management of privileges. Exploiting this vulnerability could allow attackers to enhance their privileges...
Adobe InDesign Buffer Overflow Info Disclosure
The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, provided that the user opens a specially crafted file...
OpenSky Flight Planning SQL Injection
The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure when processing parameters periodOn and periodToOn. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...
Linux mchp_eic_domain_alloc Heap Buffer Overflow DoS
The vulnerability of the mchpeicdomainalloc function in the Linux operating system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause a service failure...
Livewire Filemanager Component RCE
The vulnerability of the LivewireFilemanagerComponent.php file manager in Livewire Filemanage allows for unlimited downloading of files of a malicious type. Exploiting this vulnerability could enable a remote attacker to execute arbitrary code by sending a specially created malicious PHP file...
JetBrains YouTrack TLS Certificate Verification Disclosure Data Compromise
The vulnerability of the JetBrains YouTrack project and task management software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information and compromise the integrity of the system...
Cisco IOS Buffer Overflow DoS
Vulnerabilities of Cisco IOS and IOS XE operating systems, as well as of the Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance ASA micro-programmed network devices, are related to writing beyond the buffer boundaries in memory. Exploitation of these vulnerabilities can allo...
TOTOLINK A3100R DoS
The vulnerability of the setIpPortFilterRules function in TOTOLINK A3100R router microprogramming software is related to buffer overflows in the stack when processing the comment parameter. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially...
Framework Component Privilege Escalation
The vulnerability of the Framework component in Android operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
GarminConnect SQL Injection
The vulnerability of the online platform GarminConnect relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability could allow an attacker to access protected information...
GPAC Heap Buffer Overflow DoS
The vulnerability of the multimedia platform GPAC is related to writing beyond the memory boundaries. Exploiting this vulnerability can allow a hacker to cause a service failure...
IBM Security ReaQta Unrestricted File Upload
The vulnerability of the IBM Security ReaQta security tool lies in its ability to download unlimited files of a malicious nature. Exploiting this vulnerability allows a malicious actor to download any desired files remotely...
Qualcomm Graphics Processor Memory Corruption
The vulnerability of the graphics processor in microprogrammed software embedded in Qualcomm’s integrated circuits is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker to cause memory corruption by sending a sequence of specially crafted...
Elber Communications Equipment Authentication Bypass
The vulnerability of Elber Communications Equipment’ software products relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent the authentication process and re-register user credentials...
Kylin JDBC Driver Code Execution
The vulnerability of the JDBC driver configuration of the Kylin data processing platform is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Mozilla Firefox Thunderbird Code Execution
The vulnerability of the String.toUpperCase function in Mozilla Firefox and the Thunderbird email client is related to access to an uninitialized pointer. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
siw_create_listen InfiniBand Buffer Overflow DoS
Vulnerability of the siwcreatelisten function in the drivers/infiniband/sw/siw/siwcm.c module – The Linux kernel’s InfiniBand support driver is vulnerable due to the repeated use of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...
Llama Stack recv_pyobj Code Execution
The vulnerability of the recvpyobj method in the Llama Stack framework for working with large language models is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted JSON file...
PDF-XChange Editor Heap Buffer Overflow
The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created JB2 file...
Drupal Security Kit DoS
The vulnerability of the Drupal Security Kit CMS system’s module is related to access to resources through incompatible types. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
Palo Alto Networks PAN-OS DoS
The vulnerability of Palo Alto Networks’ network switches, managed by the PAN-OS operating system, is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending a specially crafted network...
Adobe Connect Code Execution
The vulnerability of Adobe Connect web conference software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
D-Link DIR-860L XSS
The vulnerability in the script htdocs/webinc/js/advparentctrlmap.php of the D-Link DIR-860L, DIR-865L, DIR-868L, and DIR-880L routers exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows an attacker to execute an XSS attack through the...