98239 matches found
Motorola Android Initial Loader Code Execution
The vulnerability of the initial loader of the Motorola Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the kernel-image-2.6.8-3-itanium operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Local Compromise Data Compromise
The multiple vulnerabilities in the kernel-image-2.6-386 operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious actors...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the linux-headers-2.6.26-2-all-armel package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the krb5-telnetd package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
SAP NetWeaver File Server Unauthorized Access
The SAP NetWeaver application contains an error that allows a malicious individual to remotely gain access to the SAP CUA child system and read any tables from the central SAP CUA system...
Android Privilege Escalation
The vulnerability of the Qualcomm BusPM driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges through a specially created application...
Solaris Information Disclosure
The vulnerability of the PAM LDAP module in the Solaris operating system is related to errors in the code. Exploiting this vulnerability allows a malicious actor to compromise the integrity, accessibility, and confidentiality of information...
Ubuntu VideoLAN Media Player DoS
The vulnerability of the AStreamPeekStream function in the Ubuntu operating system and the VideoLAN Media Player media player is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure abrupt termination of operations...
Google Chrome DoS
The multiple vulnerabilities of the Google Chrome browser are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions or potentially have other adverse effects...
Red Hat Enterprise Linux Data Compromise
The multiple vulnerabilities in the kernel-doc-2.6.9 package of the Red Hat Enterprise Linux operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Red Hat Enterprise Linux Data Compromise
The multiple vulnerabilities in the kernel-headers-2.4.9 package of the Red Hat Enterprise Linux operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
OpenSUSE Data Compromise
The multiple vulnerabilities in the cloop-debuginfo package of the OpenSUSE operating system can be exploited, which may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the libqt3 package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
OpenSUSE Data Compromise
Multiple vulnerabilities exist in the file-64bit operating system package of openSUSE. Exploitation of these vulnerabilities can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
OpenSUSE Data Compromise
The vulnerability of the libgsf-32bit package on the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
Debian GNU/Linux Local Compromise Data Compromise
The multiple vulnerabilities in the libvolume-id-dev package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious individuals...
SUSE Linux Enterprise Compromise Protected Information
The multiple vulnerabilities in the kernel-ec2-base package of the SUSE Linux Enterprise operating system can lead to a violation of the accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...
Red Hat Enterprise Linux Data Compromise
The vulnerability of the ed-0.2 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
Red Hat Enterprise Linux Compromise Protected Information
The vulnerability of the rsyslog-debuginfo-4.6.2 package for the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...
SUSE Linux Enterprise Data Compromise
The multiple vulnerabilities in the kernel-pae-devel package of the SUSE Linux Enterprise operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
SUSE Linux Enterprise Data Compromise
The multiple vulnerabilities in the kernel-xen-devel package of the SUSE Linux Enterprise operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
CRM Platform Authentication Bypass
The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers, operating remotely, to circumvent existing security mechanisms and gain unauthorized access to...
REDAAM IT-infrastructure Management System Auth Bypass
The vulnerability of the “REDAAM” IT-infrastructure centralized management system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
Webasyst Shop-Script CMS SQL Injection
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
Webasyst Shop-Script CMS SQL Injection
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...
NTFS Privilege Escalation
The vulnerability of the NTFS file system in Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges...
Enlogic SCADA System ENTTEK Code Execution
The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to the use of a dangerous method or function. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the operating system remotely...
Apple CoreGraphics Code Execution
The vulnerability of the Apple CoreGraphics system framework in iOS, MacOS, and iPadOS relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Go Symbolic Reference Privilege Escalation
The vulnerability of the Go programming language is related to the tracking of symbolic references. Exploiting this vulnerability can allow attackers to enhance their privileges...
Jackson-Databind NioPathHelper Arbitrary File Load
The vulnerability of the NioPathHelper.deserialize method in the Jackson-Databind library is related to insecure dynamic class loading. Exploiting this vulnerability could allow an attacker to load arbitrary files...
PAN-OS XML Processing Code Execution
The vulnerability of the XML data processing module of the PAN-OS operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...
rtw_is_desired_network Heap Buffer Overflow DoS
The vulnerability of the rtwisdesirednetwork function in the drivers/staging/rtl8723bs/core/rtwmlme.c module relates to the exploitation of integer overflows. Exploiting this vulnerability could allow an attacker to gain access to protected information or cause service failures...
MongoDB HTTP Response Analysis DoS
The vulnerability of the client library’s HTTP-response analysis mechanism for interacting with MongoDB databases is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
OpenSearch Security Plugin Privilege Escalation
The vulnerability of the OpenSearch software security plugin is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Protobufjs Code Execution
The vulnerability of the JavaScript function in the Protocol Buffers Protobuf library, called protobufjs, is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Input component in Google Security Bypass
The vulnerability of the Input component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to bypass existing security mechanisms remotely...
Cisco Webex App URL Redirection
The vulnerability of the Cisco Webex App for collaborative work relates to the redirection of the URL to an unreliable website as a result of incorrect processing of HTTP request parameters. Exploiting this vulnerability allows a malicious actor to redirect users to any desired URL address...
Windows RDP Information Disclosure
The vulnerability of the Remote Desktop Protocol RDP implementation in Windows operating systems is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
Ivanti Sentry Arbitrary Command Execution Root Privileges
The vulnerability of the built-in mobile security firewall, Ivanti Sentry, is related to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands with root privileges...
Go Windows DoS
The vulnerability of the net.Dial and net.LookupPort functions in the Go programming language for Windows operating systems is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause service interruptions...
XCP-ng Supervisor RBAC Access Bypass
The vulnerability of the setotherconfig function in the RBAC access control subsystem of the XCP-ng supervisor and the XenServer server virtualization platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...
NGINX Plus/Open Source SCGI/UWIG Module Man-in-the-Middle
The vulnerability of the ngxhttpscgimodule and ngxhttpuwsgimodule modules in NGINX Plus and NGINX Open Source web servers is related to uncontrolled memory consumption. Exploiting this vulnerability can allow a remote attacker to perform a “man-in-the-middle” attack...
TCP/IP driver Windows Bypass Security Restrictions
The vulnerability of the TCP/IP driver for Windows operating systems relates to bypassing authentication using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions remotely...
Mattermost Authentication Bypass File Upload
The vulnerability of the Mattermost instant messaging application is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain access to and upload arbitrary files...
Containous Traefik Unauthorized Access
The vulnerability of the intermediate software ForwardAuth in the reverse proxy server Containous Traefik is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
Neo4jVectorFilterExpressionConverter SQL Injection
The vulnerability of the Neo4jVectorFilterExpressionConverter component in the Spring AI development framework relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...
Drupal Kernel Code Execution
The vulnerability of the Drupal CMS system’s kernel is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Tenda AC15 Code Execution
The vulnerability of the TextEditingConversion function in the Tenda AC15 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the wpapskcrypto24g parameter. Exploiting this vulnerability allows a remote attacker to execute...
Odoo Community Edition Access Control
The vulnerability of the CRM system Odoo Community Edition and the ERP system Odoo Enterprise Edition is related to deficiencies in access control. Exploiting these vulnerabilities can allow unauthorized individuals to gain unauthorized access to protected information...