NVIDIA NSight Systems Privilege Escalation

The vulnerability of the NVIDIA NSight Systems performance analysis tool, a software solution for parallel computing on NVIDIA CUDA GPUs, is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected...

Sitecore Experience Manager Path Traversal RCE

The vulnerability of the Sitecore Experience Manager XM, Experience Platform XP, and the Experience Commerce XC platform for personalized purchasing processes is related to errors in processing the relative path to the catalog. Exploiting this vulnerability can allow an attacker to gain access to...

gorilla/csrf CSRF

The vulnerability of the HTTP protection library against cross-site request forgery, gorilla/csrf, is related to cross-site request forgery attacks. Exploiting this vulnerability can allow attackers to execute a CSRF attack...

Administrative Interface Bypass

The vulnerability of the Administrative Interface component of the /etc/shadow.sample file in the Totolink X2000R router microprogramming system is related to the use of default login credentials. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...

TOTOLink A950RG Router Arbitrary Command Execution

The vulnerability of the setNoticeCfg function in the /lib/cstemodules/system.so module of the TOTOLink A950RG router’s microprogramming software is related to the issue where an operation is performed outside the buffer in memory when processing the NoticeUrl parameter. Exploiting this...

Google Chrome Insufficient Validation

The vulnerability of Google Chrome relates to insufficient validation of input data during the processing of DOM elements. Exploiting this vulnerability allows a remote attacker to execute a spear-phishing attack or cause a service failure...

Netgear WG302v2 Arbitrary Command Execution

The vulnerability of the uigetinputvalue function in Netgear WG302v2 router microprogramming software is related to the lack of measures taken to clean data at the control level when processing the host parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...

NVIDIA Triton Inference Server Heap Buffer Overflow DoS

The vulnerability of the software for deploying and executing AI models in NVIDIA Triton Inference Server previously known as TensorRT Inference Server relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitra...

Google Chrome Microsoft Edge DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...

CommuniGate Pro Authentication Bypass

The vulnerability of the CommuniGate Pro mail server lies in the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to send emails with arbitrary content to any email address...

PDF Document Buffer Overflow Information Disclosure

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the reading of data beyond the buffer boundaries in memory during file processing for U3D files. Exploiting this vulnerability can allow attackers to disclose protecte...

PDF-XChange Editor Memory Use After Free Code Execution

The vulnerability of PDF viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the use of memory after it is freed during file processing for U3D operations. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

HarmonyOS Stack Buffer Overflow

The vulnerability of the HarmonyOS operating system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

JFS File System Heap Buffer Overflow DoS

The vulnerability of the dbAdjTree function in the fs/jfs/jfsdmap.c module of the JFS file system support in Linux’s operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel NFS DoS

The vulnerability of the nfs3svcencodegetaclres function in the fs/nfsd/nfs3acl.c module, which is part of the Linux kernel’s Network File System support, relates to the use of a NULL pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a service failure...

Termide Virtual Desktops Connection Monitor Privilege Escalation

The vulnerability of the “Termide Virtual Desktops Connection Monitor” software agent is related to the lack of protective measures for the request structure. Exploiting this vulnerability can allow attackers to enhance their privileges by using specially crafted authorized HTTP requests...

PLANET Technology microcontroller software Web Radius Srv Post

The vulnerability of the webradiusSrvpost function in PLANET Technology’s microcontroller software stems from the operation of the function beyond the buffer boundaries in memory when processing the radIpkey parameter. Exploiting this vulnerability could allow an attacker to compromise the...

PLANET Technology web_stp_globalSetting_post() Data Compromise

The vulnerability of the webstpglobalSettingpost function in PLANET Technology’s microcontroller software lies in the issue of the operation exceeding the buffer boundaries in memory when processing the stpconfname parameter. Exploiting this vulnerability allows an attacker to compromise the...

TOTOLINK A3000RU ExportIbmsConfig DoS

The vulnerability of the /cgi-bin/ExportIbmsConfig.sh file, a component of the IBMS Configuration File Handler microprogramming system for TOTOLINK A3000RU routers, is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause service interruptions...

AngularJS XSS

The vulnerability of the AngularJS JavaScript framework for developing single-page applications is related to incomplete filtering of special elements. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

Oracle CRM Technical Foundation Preferences Unauthorized Access

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to modify, add, or delete data...

cardos_have_verifyrc_package DoS

The vulnerability of the cardoshaveverifyrcpackage function in programming tools and libraries for working with OpenSC smart cards is related to the execution of operations outside the memory buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

OpenImageIO PSDInput::decompress_zip_prediction() Heap Buffer Overflow DoS

The vulnerability of the PSDInput::decompresszipprediction function in the src/psd.imageio/psdinput.cpp module of the OpenImageIO library is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected information or cause service...

lua-nginx-module HTTP Request Smuggling

The vulnerability of the lua-nginx-module in NGINX web servers is related to inconsistent interpretation of HTTP requests. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests a type of HTTP Request Smuggling attack...

Dell BIOS DMA Code Execution

The vulnerability of the Direct Memory Access DMA mechanism implemented in the BIOS of Dell notebook microprogramming systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Live555 Memory Use After Free DoS

The vulnerability of the Live555 multimedia streaming library lies in the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to trigger a Denial-of-Service attack...

Microsoft Edge iOS Information Disclosure

The vulnerability of Microsoft Edge browser on the iOS operating system is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spear-phishing attacks...

Windows 10 22H2 Kernel DoS

The vulnerability of the Windows 10 22H2 operating system is related to the assignment of the null pointer. Exploiting this vulnerability can allow an attacker to cause a kernel failure in the operating system...

SAP NetWeaver Application Server ABAP WEBGUI XSS

The vulnerability of the WEBGUI component of the SAP NetWeaver Application Server ABAP software integration platform exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

VMmanager SQL Injection

The vulnerability of VMmanager 6’s virtualization mechanism is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database remotely...

Kubernetes Cluster Management GitRepo Data Compromise

The vulnerability of the gitRepo function in the Kubernetes cluster management software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to influence the confidentiality and integrity of the protected information...

PAN-OS OpenConfig Plugin Arbitrary Command Execution

The vulnerability of the PAN-OS OpenConfig Plugin in the PAN-OS operating system is related to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

D-Link DSL-3782 Router Command Execution

The vulnerability of D-Link DSL-3782 router’s microprogramming software is related to the lack of measures taken to neutralize special elements during the processing of parameters sambawg and sambanbn. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

GitLab SSRF

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient testing of server-side requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

IBM Security ReaQta Auth Bypass Info Disclosure

The vulnerability of the IBM Security ReaQta security tool is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

Ivanti EPM Buffer Overflow DoS

The vulnerability of the Ivanti EPM endpoint management software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service failures...

GLPI XSS

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management functions is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

Palo Alto Networks Expedition Configuration Migration File Deletion

The vulnerability of the Palo Alto Networks Expedition configuration migration tool is related to incorrect external management of file names or file paths. Exploiting this vulnerability allows a malicious actor to delete arbitrary files remotely...

Eloqua CMS Drupal Unserializing Code Execution

The vulnerability of the unserialize function in the Eloqua CMS system’s Drupal module is related to the restoration of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Mozilla Firefox Thunderbird Authentication Bypass

The vulnerability of Mozilla Firefox browser and Thunderbird email client is related to deficiencies in authentication procedures, resulting from incorrect display of the domain name in the address bar. Exploiting this vulnerability allows attackers to perform spear-phishing attacks remotely...

ASUS AiCloud Code Execution

The vulnerability of the ASUS AiCloud cloud platform lies in the lack of measures taken at the management level to clean data. Exploiting this vulnerability allows a malicious actor to execute arbitrary codes remotely...

Google Chrome Blink UI Replacement

The vulnerability of Google Chrome’s Blink rendering module is related to improper implementation. Exploiting this vulnerability allows a remote attacker to replace the user interface with a specially created HTML page...

OPC WorkstationST Path Traversal

The vulnerability of the OPC server WorkstationST is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the server’s directory...

LLM User Data Loading Code Execution

The vulnerability of the software’s user data loading function for running large language models like ChuanhuChatGPT is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

RtsPer.sys Driver Unauthorized Access

The vulnerability of the RtsPer.sys driver in Realtek’s SD card readers is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the DMA controller...

YouGile Project Management Disclosure

The vulnerability of the YouGile project management service is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information...

.NET and Microsoft Visual Privilege Escalation

The vulnerability of the .NET software platform and the Microsoft Visual Studio development environment exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

VMware HCX List Extensions Code Execution

The vulnerability of the listExtensions method implementation in the VMware Hybrid Cloud Extension HCX migration software relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created SQ...

OpenSSH Windows Remote PKCS11 Code Execution

The vulnerability of the -Oallow-remote-pkcs11 configuration in the ssh-agent service of OpenSSH for Windows is related to improper external management of file names or paths. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading a malicious DLL library...