97848 matches found
PostgreSQL Session Expiration Unauthorized Access
The vulnerability of the PostgreSQL database management system is related to incorrect session duration. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read and modify data...
Windows Event Logging Service Code Execution
The vulnerability of the Windows Event Logging service in operating systems is related to deficiencies in access control mechanisms. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
OPC UA Data Transfer Resource Consumption DoS
The vulnerability of implementations of data transfer specifications in industrial networks OPC UA is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Grafana Path Traversal
Уязвимость платформы для мониторинга и наблюдения Grafana связана с неверным ограничением имени пути к каталогу с ограниченным доступом. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации...
Zabbix Agent 2 Unauthorized Access
The vulnerability of the Zabbix Agent 2 component of the Zabbix IT infrastructure monitoring system is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
Active Directory Federation Services Privilege Escalation
The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to deficiencies in access control mechanisms. Exploiting this vulnerability can allow attackers to increase their privileges...
Google Chrome SwiftShader Code Execution
The vulnerability of Google Chrome’s SwiftShader library is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
libtiff Zero-Null Dereference Crash
Уязвимость компонента libtiff/tifopen.c библиотеки libtiff связана с разыменованием нулевого указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
InspIRCd DoS
The vulnerability of the modular IRC server InspIRCd arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...
VLC Media Player Code Execution
The vulnerability of the hxxxAnnexBtoxVC function in the Videolan VLC media player lies in its ability to write data beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code during the playback of specially crafted videos...
pg_dump Code Execution
The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
HAProxy Length Checking DoS
The vulnerability of the length-checking mechanism for the NEWTOKEN format in HAProxy server software is related to errors in processing parameters related to input data length. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Lua script interpreters Heap Buffer Overflow DoS
The vulnerability of Lua scripts relates to the execution of an operation outside the buffer boundaries in the memory of ldebug.c. Exploiting this vulnerability can allow an attacker to cause a service failure...
go-tuf VerifyDelegate Function Access Modification
The vulnerability of the VerifyDelegate function in the software update security framework for systems managed by Go-TUF is related to errors in verifying the cryptographic signature due to incorrect validation of the set threshold value. Exploiting this vulnerability could allow an attacker to...
SiteIsolation Component DoS
The vulnerability of Google Chrome’s SiteIsolation component is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
OpenPDF SSRF
The vulnerability of the OpenPDF library for creating and editing PDF documents is related to insufficient validation of requests at the server-side. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...
Cisco Small Business Router XSS
The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform...
Qualcomm KGSL Driver Privilege Escalation
The vulnerability of the KGSL driver for graphics processors in Qualcomm’s embedded software lies in the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to elevate their privileges to root level and execute arbitrary code...
Google Chrome FileSystem DoS
The vulnerability of Google Chrome’s FileSystem component is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
libsndfile Heap Buffer Overflow DoS
The vulnerability of the psfbinheaderwritef function in the common.c file of the libsndfile library in the Astra Linux operating system is related to a buffer overflow issue. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
Google Chrome GPU DoS
The vulnerability of Google Chrome’s GPU component is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Google Chrome DoS
The vulnerability of Google Chrome’s user interface is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Gstreamer RTSP Code Execution
The vulnerability of the RTSP parser in the Gstreamer multimedia framework is related to buffer overflow attacks. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
libavc DoS
The vulnerability of the libavc library in the Media Framework component of the Android operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
pg_dump Code Execution
The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Google Chrome ViewTransitions Unauthorized Access
The vulnerability of the ViewTransitions component in Google Chrome browser is related to the use of an unauthorized intermediate policy file. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...
Google Chrome GPU Code Execution
The vulnerability of Google Chrome’s GPU component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Google Chrome Navigation Unauthorized Access
The vulnerability of the Google Chrome browser’s Navigation function is related to improper protection of physical external channels. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
PEAR MT Random Time Code Execution
The vulnerability in the implementation of the mtrand and time functions in the pearweb package’s PHP class library in the PEAR library is related to the use of an insufficiently secure MD5 encryption algorithm. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...
libhevc DoS
The vulnerability of the libhevc library in the Media Framework of the Android operating system is related to insufficient state checking. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
Google Chrome GPU DoS
The vulnerability of Google Chrome’s GPU component is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the linux-headers-2.6.18-6-all-alpha package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
1C-Bitrix Before and After Photos Code Execution
Vulnerability of “Before and After Photos”: Comparison of images before/after by a content management system CMS like 1C-Bitrix. Website management involves unlimited uploading of dangerous files. Exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely...
Google Chrome Fullscreen Spoofing
The vulnerability of Google Chrome’s fullscreen mode is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...
Google Chrome Media DoS
The vulnerability of the Google Chrome browser’s Media component is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
Machform form creation PHP editor XSS
The vulnerability in the Safariinit.php function of the Machform form creation PHP editor is related to the use of open redirection. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...
libmpeg2 Android Code Execution
The vulnerability in the Android operating system’s media framework libmpeg2 is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Google Chrome Compositing Unauthorized Access
The vulnerability of the Compositing component in the Google Chrome browser is related to the execution of operations beyond the buffer boundaries in memory. Exploitation of this vulnerability may allow a malicious actor to gain unauthorized access to protected information...
Google Chrome DoS
The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
MuJS Buffer Overflow DoS
The vulnerability of the JavaScript MuJS interpreter is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
libhevc Memory Corruption
The vulnerability of the libhevc component of the Android operating system’s Mediaserver service arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause memory corruption during the processing of media files and data using...
Google Chrome Downloads Spear Phishing
The vulnerability of the Downloads component in the Google Chrome browser is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spear-phishing attacks...
Suricata Access Control Data Compromise
The vulnerability of the Suricata intrusion detection and prevention system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity of the protected information...
Snort Suricata IDS Bypass Detection
The vulnerability of the TCP packet processing driver in Snort and Suricata IDS systems is related to the implementation of an internal mechanism for handling TCP connections. Exploiting this vulnerability allows a malicious actor to bypass the network attack detection functions, which are...
Vim Spell-file DoS
The vulnerability of the Spell-file processing mechanism in the text editor Vim relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
LibreOffice OpenOffice.org DoS
The vulnerability of many components of the OpenOffice.org module of the LibreOffice office software package is related to errors in number processing. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Microsoft Hyper-V Network Switch Information Disclosure
The vulnerability of the Microsoft Hyper-V Network Switch virtual programmable switch in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created application...
HAProxy DoS
The vulnerability of the server software HAProxy is related to an unvalidated return value. Exploiting this vulnerability could allow a malicious actor to cause service failures...
APIkit HTTP Connector OAuth2 Provider Unauthorized Access
The vulnerabilities of the APIkit components, the HTTP connector, and the OAuth2 Provider integrated into the API Gateway environment of Mule Runtime Mule are related to errors in processing the relative path to the restricted directory. Exploiting these vulnerabilities can allow an attacker to...
libsndfile Heap Buffer Overflow DoS
The vulnerability of the aiffreadchanmap function in the aaiff.c file of the libsndfile library relates to accessing beyond the buffer memory boundaries. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of...