95883 matches found
The vulnerability of the Kernel Streaming Service driver for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Kernel Streaming Service driver for Windows operating systems is related to buffer overflows in the “bucket”. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Siemens User Management Component (UMC) in products such as SIMATIC Information Server, SIMATIC PCS neo, SINEC NMS, and Totally Integrated Automation Portal (TIA Portal) allows a perpetrator to execute arbitrary code.
The vulnerability of the Siemens User Management Component UMC in products such as SIMATIC Information Server, SIMATIC PCS neo, SINEC NMS, and Totally Integrated Automation Portal TIA Portal is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attack...
The vulnerability of the software for detecting vulnerabilities and errors in PT Application Inspector, due to improper checking of query parameters, allows a perpetrator to execute arbitrary code.
The vulnerability of the PT Application Inspector’s software for detecting vulnerabilities and errors is related to improper checking of query parameters. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Demon Routing Protocol Daemon (rpd) in Junos OS and Junos OS Evolved operating systems allows a attacker to cause a service failure.
The vulnerability of the Demon Routing Protocol Daemon rpd in Junos OS and Junos OS Evolved lies in the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a specially crafted SNMP request...
The vulnerability of SysAid’s software for supporting and controlling hardware and software systems lies in the lack of measures taken to neutralize special elements used in the operating system commands. This allows attackers to execute arbitrary commands.
The vulnerability of the software used for supporting and controlling hardware and software systems of SysAid is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrar...
The vulnerability of MicroLogix 1400 programmable logic controllers’ microprogramming software, related to insufficient protection of operational data, allows unauthorized access by attackers to the protected information.
The vulnerability of MicroLogix 1400 programmable logic controllers’ microprogramming software is related to insufficient protection for operational data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...
The vulnerability of the DefaultAzureCredential and ManagedIdentityCredential components of the Azure Identity Libraries and Microsoft Authentication Library allows a perpetrator to escalate their privileges.
The vulnerability of the DefaultAzureCredential and ManagedIdentityCredential components in the Azure Identity Libraries and Microsoft Authentication Library authentication libraries is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow attacke...
The vulnerability of the Microsoft Visual Studio software development tool lies in the violation of data protection mechanisms, allowing attackers to execute arbitrary code.
The vulnerability of the Microsoft Visual Studio software development tool is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
The vulnerability of the WordPress MasterStudy LMS plugin, a content management system for WordPress websites, allows attackers to execute arbitrary SQL queries.
The vulnerability of the WordPress MasterStudy LMS content management system’s plugin is related to the lack of verification of the validity of XML objects. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
The vulnerability of the Simple Mobile URL Redirect Plugin in the WordPress content management system allows a hacker to perform a CSRF attack.
The vulnerability of the Simple Mobile URL Redirect Plugin in the WordPress content management system is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...
The vulnerability of the package processor on the MailSherlock audit platform, which allows a hacker to execute arbitrary SQL queries.
The vulnerability of the packet handler on the MailSherlock email audit platform relates to the lack of security measures for handling SQL query structures. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL queries...
The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models lies in the ability to write data beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
The vulnerability of the microprogrammed software of Emerson Rosemount X-STREAM flow analyzers allows a intruder to disclose protected information.
The vulnerability of Microprogrammed Software in Emerson Rosemount X-STREAM flow analyzers is related to insufficient encryption reliability. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
The vulnerability of the NEXO-OS operating system in the Bosch Nexo cordless nutrunner and Bosch Nexo special cordless nutrunner tools for installation work on production lines allows a perpetrator to load any desired files.
The vulnerability of the NEXO-OS operating system for tools used in production line assembly work, such as the Bosch Nexo cordless nutrunner and the Bosch Nexo special cordless nutrunner, is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this...
The vulnerability of NVIDIA’s SBIOS system, specifically the DGX A100 server, allows a hacker to trigger a service failure.
The vulnerability of NVIDIA’s SBIOS system, specifically the DGX A100 server, is related to incorrect dynamic analysis of variables. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of the FortiIsolator browser isolation platform lies in insufficient validation of arguments passed to commands, allowing attackers to execute arbitrary operating system commands.
The vulnerability of the FortiIsolator browser isolation platform lies in insufficient checking of arguments passed to commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the operating system...
The vulnerability of the SAP BW BI Consumer Service (BICS) service in the SAP Data Management and Analytics systems, such as SAP Business Warehouse and SAP BW/4HANA, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the SAP BW BI Consumer Service BICS module, which is part of the SAP Business Warehouse and SAP BW/4HANA data management and analytics systems, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain...
The vulnerability of the GLPI system’s request and incident handling process, related to the possibility of forging requests on the server side, allows attackers to perform SSRF attacks.
The vulnerability of the GLPI system’s request and incident handling functionality lies in insufficient verification of data entered by users in the automatic RSS detection function. Users can send specially crafted HTTP requests to trick the application into initiating requests to arbitrary...
The vulnerability of Firefox and Firefox ESR browsers relates to deficiencies in access control for certain functions, allowing attackers to trigger the loading of documents with higher privileges.
The vulnerability of Firefox and Firefox ESR browsers is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to trigger the loading of documents with higher privileges from a remote location...
The vulnerability of the PHP framework Icinga Web 2, which allows a hacker to execute arbitrary code.
The vulnerability of the Icinga Web 2 PHP framework lies in the shortcomings of pathname limitation. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
The vulnerability of the WEB_DisplayPage() function in D-Link’s wireless access points DAP-2020 and DAP-1360 allows a hacker to execute arbitrary code.
The vulnerability of the WEBDisplayPage function in D-Link’s wireless access points DAP-2020 and DAP-1360 is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...
The vulnerability of the Authentication Engine component of the Oracle Access Manager control system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Authentication Engine component in the Oracle Access Manager access control system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the NetKit-rsh remote execution program, related to deficiencies in access control, allows a perpetrator to compromise data integrity and cause service failures.
The vulnerability of the NetKit-rsh remote execution program lies in the fact that it only performs a superficial check on the object’s return value. Exploiting this vulnerability allows an attacker to compromise data integrity and also cause service failures through the malicious rsh server...
The vulnerability of the Azure Storage Library, related to deficiencies in system-defined boundaries, allows attackers to gain unauthorized access to protected information.
The vulnerability of Azure Storage Library is related to deficiencies in the system’s controlled zone segmentation. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the SAP Business One resource management system allows a perpetrator to execute arbitrary codes.
The vulnerability of the SAP Business One resource management system is related to insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the lsi_do_msgout function in the QEMU hardware emulation software allows a hacker to trigger a service failure.
The vulnerability of the lsidomsgout function hw/scsi/lsi53c895a.c in the QEMU hardware emulation software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV340, RV340W, RV345, and RV345P allows a perpetrator to execute arbitrary commands.
The vulnerability of the web-based management interface for Cisco Small Business RV340, RV340W, RV345, and RV345P microprogramming systems exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a...
The vulnerability of Microsoft Windows Defender operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of Microsoft Windows Defender operating systems is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the UserAttributeSimilarityValidator component in the Django web development framework allows a attacker to perform a denial-of-service attack.
The vulnerability of the UserAttributeSimilarityValidator component in the Django web development framework is related to a resource management error. Exploiting this vulnerability could allow an attacker to perform a denial-of-service attack by sending a specially created password to the...
The vulnerability of Adobe Premiere Rush software arises from an operation that goes beyond buffer boundaries in memory, allowing attackers to trigger a service failure.
The vulnerability of Adobe Premiere Rush arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...
The vulnerability of the J-Web interface in Junos OS operating systems allows attackers to circumvent security restrictions.
The vulnerability of the J-Web interface in Junos OS operating systems is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions from a remote location...
The vulnerability in the implementation of the Certificate Enrollment Protocol (SCEP) protocol in the PAN-OS operating system allows a perpetrator to execute any code with root privileges.
The vulnerability of the Certificate Enrollment Protocol SCEP implementation in the PAN-OS operating system exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor, operating remotel...
The vulnerability of the Brocade Fabric OS operating system, related to deficiencies in authentication procedures, allows attackers to gain access to the system.
The vulnerability of the Brocade Fabric OS operating system is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to gain access to the system via telnet, SSH, or REST...
The vulnerability of the microprogramming software used in Diebold-Nixdorf RM3/CRS cash dispensers allows a perpetrator to install an outdated or modified version of the microprogramming software in order to bypass encryption and dispense cash.
The vulnerability of the microprogramming software of Diebold-Nixdorf RM3/CRS dispensers relates to the possibility of bypassing security mechanisms. Exploiting this vulnerability could allow an intruder to install a outdated or modified version of the microprogramming software, thereby...
The vulnerability of the Content-Length header in the Apache Traffic Server web server allows a hacker to compromise the integrity of the protected information.
The vulnerability of the Content-Length header in the Apache Traffic Server web server is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...
The vulnerability of the SAP NetWeaver integration platform, related to the lack of measures taken to protect the structure of web pages, allows attackers to intercept administrator or user sessions of web resources.
The vulnerability of the Pmitest server of the SAP NetWeaver software integration platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor, operating remotely, to intercept the session of administrators or...
The vulnerability of the module configuration tools “LOCMAN WorkFlow” and “LOCMAN WorkFlow Configurator” of the engineering data and product lifecycle management system LOCMAN lies in the ability to load files of a dangerous type without limitation, allowing attackers to execute arbitrary code.
The vulnerability of the “LOZMAN WorkFlow” and “LOZMAN WorkFlow Configurator” module settings in the engineering data management system and the product lifecycle management system LOZMAN is related to the ability to load files of a dangerous type without limitation. Exploiting this vulnerability...
The vulnerability of the database update module of the WorkFlow system in the Engineering Data Management and Product Lifecycle Management system LOCMAN:PLM lies in the possibility of unlimited loading of dangerous files, allowing attackers to execute arbitrary code.
The vulnerability of the database update module of the LOCsman:PLM engineering data and product lifecycle management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow an attacker to execute arbitrary code by replacing the dll library version.dl...
The vulnerability of the programmatically defined Cisco SD-WAN network component allows a attacker to trigger a service failure.
The vulnerability of the programmatically defined Cisco SD-WAN API component is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the lldpdecode function in the daemon/protocols/lldp.c component of the LLDP protocol under Unix systems, related to buffer overflow in memory, allows a malicious actor to access confidential data, compromise its integrity, and cause service failure.
The vulnerability of the lldpdecode function in the daemon/protocols/lldp.c component of the LLDP protocol under Unix allows attackers to access confidential data, compromise its integrity, and cause service failures. This vulnerability is related to buffer overflow in memory...
The vulnerability of the Citrix XenMobile Server, a system for managing corporate mobile devices, arises from incorrect restrictions on the path to the restricted catalog. This allows unauthorized users to gain unauthorized access to protected information.
The vulnerability of the Citrix XenMobile Server, a system for managing corporate mobile devices, is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability in the directory math/i386/ of the C language library in Linux-based operating systems allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the math/i386/ library directory in the C language for Linux operating systems is related to a imbalance in the configuration of the floating-point stack. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in insufficient input validation, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
The vulnerability of the programmatically defined Cisco SD-WAN network, related to the execution of operations outside the buffer in memory, allows attackers to enhance their privileges and gain unauthorized access to protected information.
The vulnerability of the programmatically defined Cisco SD-WAN network relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and gain unauthorized access to protected information...
The vulnerability of the RemoteFX vGPU component in the Microsoft Hyper-V hardware virtualization system’s operating system Windows allows a attacker to execute arbitrary code.
The vulnerability of the RemoteFX vGPU component in the Microsoft Hyper-V hardware virtualization system’s operating system Windows exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted...
The vulnerability of the cross-platform library LibVNCServer, which stems from the inability to release resources after their useful period has ended, allows attackers to gain unauthorized access to information.
The vulnerability of the cross-platform library LibVNCServer is related to the failure to release resources after the expiration of their useful period. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to information...
The vulnerability of the message filtering function of Cisco AsyncOS software for Cisco Email Security Appliances and Cisco Content Security Management Appliances allows a attacker to cause a service failure.
The vulnerability of the message filtering function in Cisco AsyncOS software for Cisco Email Security Appliances and Cisco Content Security Management Appliances exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruption...
The vulnerability of the `format()` function in the Django web development framework allows a attacker to trigger a denial-of-service attack. [source-iocs-preserved method=django.utils.numberformat.format()]
The vulnerability of the django.utils.numberformat.format function in the Django web development framework is related to uncontrolled memory consumption, which can lead to a complete exhaustion of resources. Exploiting this vulnerability may allow an attacker to cause a service failure...
The vulnerability of the Google Chrome browser, related to improper data processing, allows a hacker to replace the content in the Omnibox (URL).
The vulnerability of the Google Chrome browser is related to incorrect data processing. Exploiting this vulnerability allows a malicious actor to replace the content in the Omnibox URL bar using IDN homographs...
The vulnerability of the Advantech WebAccess remote monitoring software lies in the insecure management of privileges. This allows a perpetrator to elevate their privileges and gain access to files.
The vulnerability of Advantech WebAccess remote monitoring software relates to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges and gain access to files...