95883 matches found
The vulnerability of the SetNetworkTomographySettings function in D-Link COVR 1200,1202,1203 router microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the SetNetworkTomographySettings function in D-Link COVR 1200,1202,1203 router microprogramming software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands throug...
The vulnerability of the Mozilla Firefox browser, related to resource management errors, allows a hacker to cause a service failure.
The vulnerability of the Mozilla Firefox browser is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of HP PageWide and HP PageWide Pro printer software, related to insufficient validation of input data, allows a hacker to trigger a service failure.
The vulnerability of HP PageWide and HP PageWide Pro printer software-related microprograms is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the AVEVA Edge SCADA system, related to the uncontrolled element in the search process, allows a intruder to execute arbitrary commands or increase their privileges.
The vulnerability of the AVEVA Edge SCADA system is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a hacker to execute arbitrary code or increase their privileges...
The vulnerability of the HPE OneView IT infrastructure management system, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the HPE OneView IT infrastructure management system is related to authentication errors. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...
The vulnerability of the gif_process_raster function in the fromgif.c component of the SIXEL Libsixel encoder/decoder implementation allows a attacker to cause a service failure.
The vulnerability of the gifprocessraster function in the fromgif.c component of the SIXEL Libsixel encoder/decoder implementation is related to the output of the operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to cause a service failure...
The vulnerability of the function DL_Dxf::handleLWPolylineData in the DXF file parsing library Dxflib allows a attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the function DLDxf::handleLWPolylineData in the DXF file parsing library Dxflib is related to writing outside the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures usin...
The vulnerability of the Mat_VarReadNextInfo5 function in the mat5.c library for reading and writing MATLAB MATIO files allows a hacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the MatVarReadNextInfo5 function in the mat5.c library for reading and writing MATLAB MATIO files is related to integer overflow. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the webNasIPS module of the TerraMaster operating system for TerraMaster TNAS storage devices allows a hacker to gain access to protected information.
The vulnerability of the webNasIPS module in the TerraMaster operating system for data storage devices called TerraMaster TNAS is related to the possibility of executing arbitrary commands. Exploiting this vulnerability could allow a malicious actor to gain access to protected information...
The vulnerability of NETGEAR’s embedded software for routers such as D7800, R7500v2, R7800, R8900, R9000, RAX1200, and XR700 lies in the lack of measures to sanitize input data. This allows attackers to execute arbitrary commands.
The vulnerability of NETGEAR’s embedded routing software, including models such as D7800, R7500v2, R7800, R8900, R9000, RAX1200, and XR700, stems from the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the threat detection mechanism for Microsoft Defender for IoT, related to improper code generation, allows a malicious actor to execute arbitrary code.
The vulnerability of the Microsoft Defender for IoT threat detection mechanism is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted request...
The vulnerability of the msp_info.htm file implementation in D-Link DI-7200G V2.E1 microprogrammable router software allows a hacker to execute arbitrary commands.
The vulnerability of the mspinfo.htm file implementation of the D-Link DI-7200G V2.E1 router microprogramming system is related to insufficient cleaning of input data during the processing of the cmd parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotel...
The vulnerabilities of NETGEAR Wi-Fi router microprogramming systems, such as AC2400, AC2600, D7000, R6020, R6080, R6120, R6220, R6230, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450, are related to authentication process flaws, which allow attackers to exploit these vulnerabilities to gain increased privileges.
The vulnerabilities of NETGEAR Wi-Fi router software models AC2400, AC2600, D7000, R6020, R6080, R6120, R6220, R6230, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450 are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can...
The vulnerability of the operating environment of the information protection software “Blockhost-Net” and “Blockhost-Net K” allows attackers to obtain information about user accounts.
The vulnerability of the operating environments of the information protection software “Blockhost-Net” and “Blockhost-Net K” is related to the use of insecure mechanisms for processing authentication data in the memory of the operating system. Exploiting this vulnerability can allow an attacker...
The vulnerability of the DBI programming language module in Perl, related to an unvalidated return value, allows attackers to trigger a service failure.
The vulnerability of the DBI programming language module in Perl is related to an unvalidated return value in the hvFetch function when checking for the presence of NULL. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the tcpdump tool for capturing and analyzing network traffic arises from buffer overflows, which allow attackers to disclose sensitive information that is protected by security measures.
The vulnerability of the tcpdump tool for capturing and analyzing network traffic arises due to buffer overflow. Exploiting this vulnerability can allow a hacker to disclose sensitive information using a specially created pcap file...
The vulnerability of the Win32k.sys component of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Win32k.sys component of the Windows operating system is related to errors in call handling. Exploiting this vulnerability can allow an attacker to enhance their privileges by running a specially created application...
The vulnerability of the RemoteFX vGPU component in the Microsoft Hyper-V hardware virtualization system’s operating system Windows allows a attacker to execute arbitrary code.
The vulnerability of the RemoteFX vGPU component in the Microsoft Hyper-V hardware virtualization system’s operating system Windows exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted...
The vulnerability of the Information Manager Console component of the Oracle Knowledge business application, which allows a perpetrator to compromise the integrity, confidentiality, and accessibility of protected information.
The vulnerability of the Information Manager Console component of the Oracle Knowledge business application relates to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the integrity, confidentiality, and accessibility of protected information...
The vulnerability of the GDB debugger’s module allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the GDB debugger’s gdb module relates to the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a perpetrator to execute arbitrary code or trigger a service failure using a specially created ELF file...
The vulnerability of the Windows Jet Database Engine database management system allows a hacker to execute arbitrary code.
The vulnerability of the Windows Jet Database Engine database management system in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
The vulnerability of the Windows AppX Deployment Service (AppXSVC) in the Windows operating system allows a perpetrator to escalate their privileges.
The vulnerability of the Windows AppX Deployment Service AppXSVC operating system is related to errors in handling hard links. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
The vulnerability of the gpg data encryption tool from the gnupg package, related to errors in pointer arithmetic, allows a perpetrator to trigger a service failure.
The vulnerability of the gpg data encryption tool from the gnupg package is related to errors in pointer arithmetic. Exploiting this vulnerability could allow an attacker to trigger a service failure, by passing a specially crafted file as an argument to the command line...
Vulnerability in the antivirus component of the Secret Net Studio information protection system, allowing a perpetrator to trigger a service failure
The vulnerability in the antivirus component of the Secret Net Studio information protection system is related to buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the XNU kernel of iOS, Mac OS, and TV OS allows attackers to perform unauthorized changes to the memory shared among processes.
The vulnerability of the XNU-based operating systems such as iOS, Mac OS, and TV OS is related to errors in the memory initialization mechanism. Exploiting this vulnerability allows an attacker to perform unauthorized changes to the memory shared among processes, using specially crafted executabl...
The vulnerability of the Hyper-V hardware virtualization system for Windows operating systems allows attackers to disclose sensitive information that should be protected.
The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to errors in the authentication process in the guest operating system. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
The vulnerability of Oracle Java SE’s 2D software platform allows a hacker to gain full control over the application.
The vulnerability of the Oracle Java SE 2D software platform is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker operating remotely to gain full control over the application...
The vulnerability of the get_rgba_default function in the libcaca graphics library allows a hacker to gain unauthorized access to protected information.
The vulnerability of the getrgbadefault function in the libcaca graphics library is related to integer overflow. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the LibVNC library, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.
The vulnerability of the LibVNC library lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Vulnerability of the Server component: The Oracle MySQL Server database management system’s partitioning scheme allows attackers to gain unauthorized access to protected data or cause service failures.
Vulnerability of the Server component: The Oracle MySQL Server database management system’s partitioning scheme is vulnerable due to lack of access control mechanisms. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected data or cause service failures...
The vulnerability of the MatrixSSL cryptographic information protection software lies in buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.
The vulnerability of the MatrixSSL information encryption software arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a X.509 certificate with a specially crafted “Subject Alt Name”...
The vulnerability in the `libavformat/rtmppkt.c` component of the FFmpeg multimedia library allows a attacker to execute arbitrary code.
The vulnerability of the libavformat/rtmppkt.c component in the FFmpeg multimedia library arises due to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, without any checks for packet size compliance with RTMP...
The vulnerability of the FFmpeg multimedia library, which allows a hacker to perform recording beyond the memory limit
The vulnerability of the FFmpeg multimedia library arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to perform write operations beyond the memory boundaries, related to the function ffh264SliceContextInit in libavcodec/h264dec.c...
Vulnerability of the Java Platform software platform, allowing a remote attacker to compromise the integrity of protected information
The vulnerability of the Java SE and Java SE Embedded software platform allows a malicious actor to compromise data integrity by using the Security subcomponent...
Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the kernel-pae-devel package of the SUSE Linux Enterprise operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the integrity and accessibility of protected information
Multiple vulnerabilities exist in the openssl package up to version 0.9.8l-r2 of the Gentoo Linux operating system. Exploitation of these vulnerabilities may lead to the compromise of the integrity and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the libedataserverui1.2-6 package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the xorg-x11-Mesa-devel package of the OpenSUSE operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the kernel-headers-2.4.27-4-sparc64-smp Debian GNU/Linux operating system can lead to a violation of the accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...
Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the libtdb1-debuginfo-32bit package of the OpenSUSE operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...
The vulnerability of the control console of the MaxPatrol EDR detection and response system allows a perpetrator to trigger a service failure.
The vulnerability of the control console of the MaxPatrol EDR detection and response system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the pci_doe_recv_resp() function in the drivers/pci/doe.c module of the Linux operating system’s PCI device driver allows a hacker to cause a service failure.
The vulnerability of the pcidoerecvresp function in the drivers/pci/doe.c module of the Linux PCI device driver is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ishtp_bus_remove_all_clients() function in the drivers/hid/intel-ish-hid/ishtp/bus.c file of the Linux kernel’s user interface device subsystem allows a attacker to cause a service failure.
The vulnerability of the ishtpbusremoveallclients function in the drivers/hid/intel-ish-hid/ishtp/bus.c file of the Linux kernel’s user interface device subsystem driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the EXTRACT() function in the PostgreSQL database management system allows a hacker to execute arbitrary code.
The vulnerability of the EXTRACT function in the PostgreSQL database management system is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
The vulnerability of the /goform/ConfigWirelessBase_5g file of the Web Endpoint component of the microprogramming software for routers UTT HiPER 1250GW allows a attacker to cause a service failure.
The vulnerability of the /goform/ConfigWirelessBase5g file of the Web Endpoint component of the microprogramming software for routers UTT HiPER 1250GW is related to the escape of operations from the buffer into memory. Exploiting this vulnerability could allow a malicious actor to cause service...
The vulnerability of the DNS Client component for Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the DNS Client component for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Vulnerability of operating systems due to improper validation of specified input types, allowing attackers to execute arbitrary code.
The vulnerability of operating systems iPadOS, iOS, and macOS Tahoe is related to improper validation of the specified data type. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS)
Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, проводить межсайтовые сценарные атаки XSS...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to deficiencies in access control in isolated environments. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Adobe InDesign’s computer design automation tool, related to reading data beyond the buffer in memory, allows attackers to gain unauthorized access to protected information.
The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, provided that the user opens a specially crafted file...