95883 matches found
The vulnerability of the `format()` function in the Django web development framework allows a attacker to trigger a denial-of-service attack. [source-iocs-preserved method=django.utils.numberformat.format()]
The vulnerability of the django.utils.numberformat.format function in the Django web development framework is related to uncontrolled memory consumption, which can lead to a complete exhaustion of resources. Exploiting this vulnerability may allow an attacker to cause a service failure...
The vulnerability of the Google Chrome browser, related to improper data processing, allows a hacker to replace the content in the Omnibox (URL).
The vulnerability of the Google Chrome browser is related to incorrect data processing. Exploiting this vulnerability allows a malicious actor to replace the content in the Omnibox URL bar using IDN homographs...
The vulnerability of the Advantech WebAccess remote monitoring software lies in the insecure management of privileges. This allows a perpetrator to elevate their privileges and gain access to files.
The vulnerability of Advantech WebAccess remote monitoring software relates to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges and gain access to files...
The vulnerability of the Enterprise Resource Management System “Galaktika ERP” allows a perpetrator to execute arbitrary codes.
The vulnerability of the “Update Manager” component of the enterprise resource management system Galaktika ERP is related to the lack of protection for transmitted data. Exploiting this vulnerability allows a malicious actor, who operates remotely and has access to the update server, to execute...
The vulnerability of the wfst_run application, which is part of the speech-tools speech recognition system, allows a violator to cause a service failure.
The vulnerability of the wfstrun application, which is part of the speech-tools speech recognition system, is related to overflow errors in the command line processing. Exploiting this vulnerability can allow an attacker to cause a service failure by submitting commands with specially crafted...
The vulnerability of the LIGO! Soft Comfort software, related to access control errors, allows a intruder to execute arbitrary code.
The vulnerability of the LOGO! Soft Comfort development software is related to access control errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code upon opening a specially crafted project...
The vulnerability of the Win32k component in Windows operating systems, which allows attackers to increase their privileges
The vulnerability of the Win32k component in Windows operating systems exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
The vulnerability of the Simple Network Management Protocol (SNMP) subsystem of the Cisco IOS operating system, which allows a hacker to inject code or trigger a system reboot.
Many vulnerabilities in the Simple Network Management Protocol SNMP subsystem of the Cisco IOS operating system are caused by buffer overflows. Exploitation of these vulnerabilities allows a malicious actor to inject code into the system or cause it to restart by sending specially created SNMP...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the kernel-image-2.6.8-3-mckinley-smp operating system of Debian GNU/Linux may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the hostap-modules-2.6.8-4-386 package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the linux-headers-2.6.26-2-486 package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
Multiple vulnerabilities exist in the linux-doc-2.6.26 package of the Debian GNU/Linux operating system. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the linux-headers-2.6.26-2-all package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the Ruby on Rails software platform, which allows attackers to circumvent existing access control policies
The vulnerability in the nestedattributes.rb file of the activerecord/lib/activerecord module in the Ruby on Rails software framework is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to bypass existing access restrictions by using nested attributes ...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the libqt3c102-mt-ibase package of the Debian GNU/Linux operating system may lead to violations of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the kernel-headers-2.4.9 package of the Red Hat Enterprise Linux operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ed package up to version 1.0 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
The vulnerability of the Red Hat Enterprise Linux operating system allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ed-0.2 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the xorg-x11-Mesa-32bit package of the SUSE Linux Enterprise operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the Gentoo Linux operating system, which allows a malicious intruder to compromise the accessibility of protected information
The vulnerability of the liotbr package up to version 3.2.1 of the Gentoo Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...
The vulnerability of the Gentoo Linux operating system, which allows a malicious intruder to compromise the accessibility of protected information
The vulnerability of the openswan package up to version 2.6.39-r1 inclusive in the Gentoo Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...
Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the accessibility of protected information
The multiple vulnerabilities in the kernel-ec2-base package of the SUSE Linux Enterprise operating system can lead to a violation of the accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...
The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.
The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Platypus.js tooling platform, related to deficiencies in the authentication process, allows a violator to execute arbitrary commands.
The vulnerability of the Platypus.js platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the nft_exthdr_init() function in the net/netfilter/nft_exthdr.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the nftexthdrinit function in the net/netfilter/nftexthdr.c module of the netfilter component of the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...
The vulnerability of the `ras_core_ras_interrupt_detected()` function in the `drivers/gpu/drm/amd/ras/rascore/ras_core.c` file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in Linux operating systems allows a attacker to cause a service failure.
The vulnerability of the rascorerasinterruptdetected function in the driver/gpu/drm/amd/ras/rascore/rascore.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an...
The vulnerability of the bpf_prog_test_run_skb() function in the net/bpf/test_run.c module, which is part of the networking functions of the Linux operating system’s kernel, allows a hacker to cause a service failure.
The vulnerability of the bpfprogtestrunskb function in the net/bpf/testrun.c module, which implements networking functions in the Linux kernel, relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the onie_tlv_add_cells() function in the drivers/nvmem/layouts/onie-tlv.c driver for NVMEM devices (energy-independent memory in the Linux operating system’s kernel) allows a attacker to cause a service failure.
The vulnerability of the onietlvaddcells function in the drivers/nvmem/layouts/onie-tlv.c driver for NVMEM an energy-independent memory technology in the Linux operating system is related to the execution of a loop with an unreachable exit condition “Infinite loop”. Exploiting this vulnerability...
The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge browsers allows a perpetrator to compromise data integrity and cause service interruptions.
The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and also cause service interruptions throug...
The vulnerability of the DIAFAN.CMS content management system lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.
The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Content Credentials SDK libraries arises from incorrect restrictions on the path name to the catalog, allowing attackers to write arbitrary files.
The vulnerability of the Content Credentials SDK libraries is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow a attacker to write arbitrary files...
The vulnerability of Active Directory Domain Services (AD DS) on Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of Active Directory Domain Services AD DS on Windows operating systems is related to overflow of a buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted data...
The vulnerability of the client library’s HTTP-response analysis mechanism for interacting with MongoDB databases allows a attacker to induce a service failure.
The vulnerability of the client library’s HTTP-response analysis mechanism for interacting with MongoDB databases is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
The vulnerability of the golang-x-image package, a programming language, allows attackers to trigger a service failure.
The vulnerability of the golang-x-image package, a programming language, is related to an exception handling error. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the ColdFusion software platform, related to insufficient validation of input data, allows attackers to execute arbitrary code.
The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the NFS intrusion detection and prevention system Suricata allows a intruder to trigger a service failure.
The vulnerability of the NFS intrusion detection and prevention system Suricata depends on the unlimited distribution of resources. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
The vulnerability of Microsoft Exchange Server’s mail server, related to insufficient validation of requests on the server side, allows attackers to increase their privileges.
The vulnerability of Microsoft Exchange Server is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability of the built-in mobile security firewall Ivanti Sentry lies in the lack of measures to neutralize specific elements, allowing a intruder to execute arbitrary commands with root privileges.
The vulnerability of the built-in mobile security firewall, Ivanti Sentry, is related to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands with root privileges...
Pilot BIM Server (Artemiy Tsezersky) (No. 6 dated June 9, 2026 at 16:00:50)
...
The vulnerability of the UniFi OS Server network management center arises from incorrect restrictions on the path to the directory, allowing unauthorized access by intruders to protected information.
The vulnerability of the UniFi OS Server network management center is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the MFlash secure data exchange platform, related to authentication errors, allows a hacker to elevate their privileges and direct files to arbitrary users.
The vulnerability of the MFlash secure data exchange platform is related to authentication errors. Exploiting this vulnerability allows a malicious actor to enhance their privileges and direct files to arbitrary users...
Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю выполнить произвольный код
Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...
The vulnerability of the memory management block for IOMMU operations in AMD’s microprogramming software for processors allows a hacker to gain unauthorized access to protected information.
The vulnerability of the memory management block for IOMMU operations in AMD microprogramming systems relates to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the JIT-compiler of Google Chrome’s Turbofan browser allows a hacker to execute arbitrary code.
The vulnerability of the JIT-compiler of Google Chrome’s Turbofan browser is related to access to resources through incompatible types. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Universal Plug and Play (UPnP) Device Host Service in Windows operating systems allows a hacker to enhance their privileges.
The vulnerability of the Universal Plug and Play UPnP Device Host Service in Windows operating systems is related to unreliable pointer reassignments. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability in the _rtw_join_timeout_handler() function of the drivers/staging/rtl8723bs/core/rtw_mlme.c module allows a hacker to trigger a service failure. This vulnerability enables a hacker to exploit additional devices in the Linux operating system’s kernel support.
The vulnerability of the rtwjointimeouthandler function in the drivers/staging/rtl8723bs/core/rtwmlme.c module relates to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of the KLogic SCADA system’s virtual controller “KASCAD” allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the KLogic SCADA system “KASKAD”’s virtual controller is related to the use of a password hash instead of the actual password for authentication. Exploiting this vulnerability allows an intruder to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of Airoha Technology’s Custom Protocol Bluetooth-chip-based TWS earphones allows a hacker to circumvent existing security restrictions.
The vulnerability of Airoha Technology’s Custom Protocol Bluetooth-chip TWS headphones is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions...
The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk system, related to deficiencies in authentication procedures, allows attackers to bypass security restrictions and gain unauthorized access to protected information.
The vulnerability of the SolarWinds IT infrastructure management software’s Web Help Desk component is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to bypass security restrictions and gain unauthorized access to protected information...
The vulnerability of the Apache Kyuubi distributed execution SQL query service, related to path traversal, allows attackers to bypass existing security mechanisms and gain unauthorized access to protected information.
The vulnerability of the Apache Kyuubi distributed execution service for SQL queries relates to path traversal. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms and gain unauthorized access to protected information...