92298 matches found
The vulnerability of the Windows GDI component in Windows operating systems allows attackers to gain unauthorized access to protected information.
The vulnerability of the Windows GDI component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the web interface of the Cisco Registered Envelope Service allows a perpetrator to execute arbitrary JavaScript code and gain unauthorized access to the protected information.
The vulnerability of the Cisco Registered Envelope Service RES web interface lies in the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code and gain unauthorized access to protected informati...
The vulnerability of the Elastic Services Controller’s network management mechanism, related to errors in API request validation, allows a perpetrator to bypass authentication procedures and execute arbitrary code.
The vulnerability of the Elastic Services Controller’s network management interface is related to errors in checking API requests. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures and execute arbitrary code by sending a specially crafted request to the RE...
The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite allows a hacker to execute HTML code.
The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML code into the user’s browser by placin...
The vulnerability in the web interface of the microprogramming software for Cisco IP Phones series 8800 allows a perpetrator to cause a service failure.
The vulnerability of the web interface of Cisco IP phones—IP Phone 8800, IP Conference Phone 8832, IP Phone 8821, and IP Phone 8821-EX—is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Network-Based Application Recognition technology in Cisco IOS and Cisco IOS XE operating systems allows a hacker to trigger a service failure.
The vulnerability of the Network-Based Application Recognition technology in Cisco IOS and Cisco IOS XE operating systems exists due to errors in syntactic analysis of DNS packets. Exploiting this vulnerability allows a malicious actor, who has not undergone authentication checks, to trigger a...
The vulnerability of the Java Advanced Management Console (Server) component of the Oracle Java SE software platform allows a perpetrator to gain unauthorized access to protected data or cause service failures.
The vulnerability of the Java Advanced Management Console Server component of the Oracle Java SE software platform is related to insufficient access control. Exploiting this vulnerability may allow an attacker operating remotely to gain unauthorized access to protected data or cause service...
The vulnerability of the User Monitoring component in the Application Management Pack of the Oracle E-Business Suite allows a malicious individual to gain unauthorized access to protected data.
The vulnerability of the User Monitoring component in the Application Management Pack of the Oracle E-Business Suite is related to access control errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP...
The vulnerability of the Core Components of the identity management application for Oracle Identity Analytics allows a perpetrator to gain unauthorized access to data.
The vulnerability of the Core Components of the Oracle Identity Analytics application management application is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to data using the HTTP protocol...
The vulnerability of the NormaCS automation tool for working with regulatory documents allows a violator to execute any code they desire.
The vulnerability of the NormaCS tool for automating the processing of regulatory documents is related to the use of the MFC library set. It arises due to deficiencies in the restriction on the searchable range of dynamically loaded libraries. Exploiting this vulnerability could allow a malicious...
The vulnerability in the Cisco Prime License Manager’s web infrastructure, related to the lack of protection for SQL query structures, allows attackers to execute arbitrary SQL queries.
The vulnerability in the Cisco Prime License Manager’s web infrastructure is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...
The vulnerability of the SMB service in the RouterOS operating system of MikroTik allows a hacker to execute arbitrary code.
The vulnerability of the SMB service in the RouterOS operating system from MikroTik arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the DHCP relay subsystem in Cisco IOS and Cisco IOS XE allows a attacker to execute arbitrary code with administrator privileges, or to cause a service failure and system reboot.
The vulnerability of the DHCP relay subsystem in Cisco IOS and Cisco IOS XE systems is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a Denial-of-Service attack DoS, along with a system reboot, using a specially crafted DHCPv...
The vulnerability of Qualcomm’s TrustZone microprogramming software technology allows attackers to enhance their privileges.
The vulnerability of Qualcomm’s TrustZone microprogramming software’s Android Secure Execution Environment from the CAF repository is related to errors in cryptographic transformations. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...
The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the libvpx library in the mediaserver component of the libwebm framework in the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory...
The vulnerability of the Linux operating system’s kernel, which allows a hacker to obtain confidential information
The vulnerability of the serialmultiportstruct structure in the Linux operating system is related to access control deficiencies. Exploiting this vulnerability could allow a local attacker to obtain confidential information...
The vulnerability in the Windows Desktop Experience software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability in DirectShow allows for an increase in privilege levels...
The vulnerability of Microsoft Lync Server software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the GDI+ component of the Microsoft Lync Attendee User program, related to the processing of specially crafted images, allows for remote execution of code when a user opens a specially crafted image. Exploiting this vulnerability enables a malicious individual to gain full...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
Multiple vulnerabilities exist in the linux-doc-2.6.26 package of the Debian GNU/Linux operating system. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the Ubuntu operating system and the VideoLAN Media Player, which allows a hacker to trigger a service failure
The vulnerability of the AStreamPeekStream function in the Ubuntu operating system and the VideoLAN Media Player media player is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure abrupt termination of operations...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the libqt3c102-mt-ibase package of the Debian GNU/Linux operating system may lead to violations of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the Gentoo Linux operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the imlib2 package up to version 1.4.2-r1 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The hostap-modules-2.4.27-4-k7 package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the kernel-headers-2.4.9 package of the Red Hat Enterprise Linux operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the audit-libs package of the OpenSUSE operating system can be exploited, leading to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the integrity and accessibility of protected information
Multiple vulnerabilities exist in the openssl package up to version 0.9.8l-r2 of the Gentoo Linux operating system. Exploitation of these vulnerabilities may lead to the compromise of the integrity and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the accessibility of protected information
The kernel-vmipae-debuginfo package of the SUSE Linux Enterprise operating system has multiple vulnerabilities that, if exploited, may lead to a violation of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the cloop-kmp-desktop package of the OpenSUSE operating system can be exploited, leading to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the openssl095a package of the Red Hat Linux operating system can lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the openldap-clients-1.2.13 package for the Red Hat Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the integrity of protected information
The kdeedu-doc-html package of the Debian GNU/Linux operating system has multiple vulnerabilities that, if exploited, could lead to the compromise of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the Cisco RoomOS operating system, related to operations beyond the buffer in memory, allows a perpetrator to execute arbitrary code or cause a service failure.
The vulnerability of the Cisco RoomOS operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...
The vulnerability of the beforeInteractive() function in the Next.js web application development software platform, which allows a hacker to execute arbitrary code.
The vulnerability of the beforeInteractive function in the Next.js web application development software platform is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Microsoft Azure Attestation Service and Device Health Attestation Service for Windows operating systems allows attackers to perform spoofing attacks.
The vulnerability of the Microsoft Azure Attestation Service and Device Health Attestation Service for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to perform spoofing attacks...
The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the DHCP server service for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the soup_body_input_stream_read_chunked() function in the LibSoup library allows a attacker to circumvent existing security restrictions, implement a cache poisoning attack, or gain unauthorized access to protected information.
The vulnerability of the soupbodyinputstreamreadchunked function in the LibSoup library is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to circumvent existing security measures, execute a cache poisoning attack, or gain unauthorized...
The vulnerability of the BuildKit container-building software lies in the improper restriction of the path name to the restricted-access directory, which allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the BuildKit container-building software is related to an incorrect limitation on the path to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the PDF processing library PyPDF2, related to excessive iteration, allows a hacker to trigger a service failure.
The vulnerability of the PyPDF2 library for processing PDF files is related to excessive iteration. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the damon_get_intervals_score() function in the mm/damon/core.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a system failure.
The vulnerability of the damongetintervalsscore function in the mm/damon/core.c module of the Linux kernel’s memory management subsystem is related to insufficient checking of input data when dividing by zero. Exploiting this vulnerability could allow a remote attacker to cause a system failure...
The vulnerability of the mechanism for destroying arrays containing objects of the PHP interpreter’s object model allows a attacker to bypass the protection provided by disable_functions and invoke operating system commands.
The vulnerability of the mechanism for destroying arrays containing objects of the PHP interpreter’s object model is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to bypass the disablefunctions protection mechanism and invoke operating syste...
The vulnerability in the web interface for managing microprogramming router Tenda F3 allows a perpetrator to compromise the integrity of the protected information.
The vulnerability in the web interface for managing microprogramming router software Tenda F3 is related to incorrect restrictions on the visible layers or frames of the user interface. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected...
The vulnerability of the KLogic SCADA system’s virtual controller “KASCAD” allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the KLogic SCADA system “KASKAD”’s virtual controller is related to the use of a password hash instead of the actual password for authentication. Exploiting this vulnerability allows an intruder to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the access controller service allows attackers to exploit the Capability Access Management Service (camsvc) of Windows operating systems, thereby enabling them to increase their privileges.
The vulnerability of the access controller service related to the Capability Access Management Service camsvc of Windows operating systems is associated with synchronization errors when using a shared resource “Race Conditions”. Exploiting this vulnerability can allow an attacker to increase thei...
The vulnerability of the Zimbra Collaboration Suite’s email management system, which stems from insufficient validation of incoming requests, allows attackers to carry out SRF attacks.
The vulnerability of the Zimbra Collaboration Suite’s email management system is related to insufficient validation of incoming requests. Exploiting this vulnerability could allow a malicious actor to execute a SRF attack remotely...
The vulnerability of the ext4_feature_set_ok() function in the fs/ext4/super.c module of the Ext4 file system support module in Linux’s operating system allows a hacker to cause a service failure.
The vulnerability of the ext4featuresetok function in the fs/ext4/super.c module of the Linux file system support module is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Modbus RTU protocol implementation in DIRIS Digiware M-70 communication switches allows a intruder to cause a service failure.
The vulnerability of the Modbus RTU protocol implementation in DIRIS Digiware M-70 communication gateways is related to the absence of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
The vulnerability of Inbox COM objects in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of Inbox COM objects in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the Windows DWM library in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows DWM library in Windows operating systems is related to the swapping of unreliable pointers. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the /boafrm/formSysCmd component in the microprogramming software of TOTOLINK N350R allows a hacker to execute arbitrary commands.
The vulnerability of the /boafrm/formSysCmd component of the TOTOLINK N350R router’s microprogramming system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of the PHP class for generating PDF documents, TCPDF, is related to the lack of protective measures for website structure. This allows attackers to perform cross-site scripting attacks.
The vulnerability of the PHP class for generating PDF documents via TCPDF is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...