98239 matches found
FatPipe Web Interface Code Execution
The vulnerability of the FatPipe software management web interface is related to the unlimited download of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created malware file...
Open5GS GTP Resource Consumption DoS
The vulnerability of the Open5GS GTP library is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures during the analysis of extension headers in GPRS tunneling protocol messages GPTv1-U...
SNC_io parser Heap Buffer Overflow DoS
The vulnerability of the SNCio parser function ::readvertex is related to the reading of data within the permissible buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created...
SNC_io parser Heap Buffer Overflow DoS
The vulnerability of the SNCio parser function ::readfacet and fh-incidentvolume in the NefS2/SNCio parser component’s NefS2/SNCio parser.h file is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity...
D-Link DIR-1935 Router Code Execution
The vulnerability of the SetSysLogSettings function in the web interface for managing D-Link DIR-1935 router microprogramming software is related to the failure to sanitize the input data in the string entered by the user when processing the IPAddress element. Exploiting this vulnerability allows...
D-Link DIR-1935 Router Code Execution
The vulnerability of the SetStaticRouteIPv4Settings function in the web interface for managing D-Link DIR-1935 router microprogramming software is related to the copying of buffers without checking the size of the input data when processing the NetMask element. Exploiting this vulnerability could...
D-Link COVR Router Arbitrary Command Execution
The vulnerability of the SetNetworkTomographySettings function in D-Link COVR 1200,1202,1203 router microprogramming software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands throug...
SAP Business One Code Execution
The vulnerability of the SAP Business One resource management system is related to insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Azure Service Fabric Container Privilege Bypass
The vulnerability of the Azure Service Fabric Container is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass security restrictions and enhance their privileges...
Manage Proxies Oracle E-Business Suite Unauthorized Access
The vulnerability of the Manage Proxies component of the Oracle E-Business Suite automation system exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP...
Cisco DNA Center Audit Log Disclosure
The vulnerability of the audit journal of the Cisco Digital Network Architecture DNA Center relates to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker to disclose protected information...
Cisco Small Business RV340 Router Command Execution
The vulnerability of the web-based management interface for Cisco Small Business RV340, RV340W, RV345, and RV345P microprogramming systems exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a...
FortiOS execute restore src-vis Arbitrary File Write
The vulnerability in the execution of the “execute restore src-vis” command in FortiOS operating systems lies in the loading of code without checking its integrity. Exploiting this vulnerability allows an attacker to write arbitrary files using specially crafted update packages...
VLC Media Player AVI_ExtractSubtitle Confidential Data DoS
The vulnerability of the AVIExtractSubtitle component in the VLC Media Player media player is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and also cause a service failure by using a...
Microsoft Edge Privilege Escalation
The vulnerability of Microsoft Edge is related to incorrect code generation management. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
MediaWiki Data Compromise
The vulnerability of the software for implementing the hypertext environment MediaWiki is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability allows a malicious actor, operating remotely, to compromise the integrity of the data...
Linux bond_ipsec_add_sa() DoS
The vulnerability of the bondipsecaddsa function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
NETGEAR Router Command Injection
The vulnerability of the embedded software of NETGEAR routers such as GC108P, GC108PP, GS108Tv3, GS110TPv3, GS110TPP, GS110TUP, GS710TUP, GS308T, GS310TP, S710TUP, GS716TP, GS716TPP, GS724TPP, GS724TPv2, GS724TPP, GS728TPPv2, GS728TPv2, GS752TPv2, GS752TPP, GS750E, MS510TXM, and MS510TXUP lies in...
iSNS Microsoft Windows Code Execution
The vulnerability of the Internet Storage Name Service iSNS on Microsoft Windows operating systems is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
D-Link DI-7200G Router Arbitrary Command Execution
The vulnerability of the mspinfo.htm file implementation of the D-Link DI-7200G V2.E1 router microprogramming system is related to insufficient cleaning of input data during the processing of the cmd parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotel...
Mbed TLS Heap Buffer Overflow DoS
The vulnerability of the mbedtlssslsetsession function is related to the implementation of TLS and SSL protocols. Mbed TLS is vulnerable to a memory reclamation error. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Xen Hypervisor Privilege Escalation
The vulnerability of Xen hypervisors on x86 Intel systems is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures...
NETGEAR Wi-Fi Router Authentication Bypass
The vulnerabilities of NETGEAR Wi-Fi router software models AC2400, AC2600, D7000, R6020, R6080, R6120, R6220, R6230, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450 are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can...
Adobe Premiere Rush Heap Buffer Overflow DoS
The vulnerability of Adobe Premiere Rush arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...
Diebold-Nixdorf RM3/CRS Bypass Encryption
The vulnerability of the microprogramming software of Diebold-Nixdorf RM3/CRS dispensers relates to the possibility of bypassing security mechanisms. Exploiting this vulnerability could allow an intruder to install a outdated or modified version of the microprogramming software, thereby...
iOS Buffer Overflow Privilege Escalation
The vulnerability of the iOS operating system arises from an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...
Moxa MXView Code Execution
The vulnerability of the Moxa MXView network control software lies in the lack of measures taken to neutralize special elements in the output data used by the incoming component. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted reques...
Google Chrome Type Conversion Bypass
The vulnerability of Google Chrome is related to a type conversion error. Exploiting this vulnerability allows an attacker to bypass existing security restrictions through a specially created HTML page...
Apache Traffic Server Cachekey Plugin Data Compromise
The vulnerability of the cachekey plugin in the Apache Traffic Server web server arises from an operation that occurs outside the buffer limits of the stack. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...
Windows kernel API Unauthorized Access
The vulnerability of the Windows operating system’s kernel API is related to errors in the FileObject structure. Exploiting this vulnerability can allow an attacker to gain unauthorized access to modify, add, or delete data...
SonicWall Email Security Path Traversal
The vulnerability of SonicWall Email Security’s email security software relates to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
PMIx MPI resource manager plugin Buffer Overflow DoS
The vulnerability of the PMIx MPI resource manager plugin by SLURM is related to buffer overflow in memory. Exploiting this vulnerability allows an attacker who operates remotely to access confidential data, compromise its integrity, and cause service failures...
Netgear ProSafe Plus Privilege Escalation
The vulnerability of the NSDP protocol implementation in Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 networking devices is related to authentication process errors. Exploiting this vulnerability can allow attackers to increase their privileges remotely...
Cisco SD-WAN Privilege Escalation
The vulnerability of the programmatically defined Cisco SD-WAN network relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and gain unauthorized access to protected information...
Oracle PeopleSoft Enterprise PeopleTools Diagnostic Framework Unauthorized Access
The vulnerability of the Diagnostic Framework component of the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...
Grafana data representation web tool Authentication Bypass
The vulnerability of the Grafana data presentation web tool is related to authentication errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Apache Tika Resource Consumption DoS
The vulnerability of the Apache Tika content detection and analysis engine is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Galaktika ERP Code Execution
The vulnerability of the “Update Manager” component of the enterprise resource management system Galaktika ERP is related to the lack of protection for transmitted data. Exploiting this vulnerability allows a malicious actor, who operates remotely and has access to the update server, to execute...
Windows Jet Database Engine Code Execution
The vulnerability of the Windows Jet Database Engine database management system in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
Oracle WebLogic Server Unauthorized Access
The vulnerability of the EJB Container component of Oracle WebLogic Server is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the T3 protocol...
Win32k Privilege Escalation
The vulnerability of the Win32k component in Windows operating systems exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
Microsoft Edge ChakraCore RCE
The vulnerability of Microsoft Edge’s JavaScript ChakraCore engine is related to memory object handling flaws. Exploiting this vulnerability can allow a remote attacker to trigger memory corruption and execute arbitrary code through a specially crafted web page...
LibVNC Use-After-Free
The vulnerability of the LibVNC library lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Microsoft JET Database Engine Code Execution
The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
Oracle Marketing User Interface Unauthorized Access
The vulnerability of Oracle Marketing’s User Interface component is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...
Microsoft Hyper-V Hardware Virtualization Code Execution
The vulnerability of Microsoft Hyper-V hardware virtualization technology for Windows operating systems exists due to insufficient verification of input data. Exploiting this vulnerability can allow attackers to execute arbitrary code using specially crafted packet data vSMB...
Adobe DNG Converter Buffer Overflow RCE
The vulnerability of the Adobe DNG Converter arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and cause memory corruption...
FFmpeg libavformat/rtmppkt.c Code Execution
The vulnerability of the libavformat/rtmppkt.c component in the FFmpeg multimedia library arises due to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, without any checks for packet size compliance with RTMP...
Motorola Android Initial Loader Code Execution
The vulnerability of the initial loader of the Motorola Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the kernel-image-2.6.8-3-itanium operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...