95883 matches found
The vulnerability of the Zimbra Collaboration Suite’s email management system, which stems from insufficient validation of incoming requests, allows attackers to carry out SRF attacks.
The vulnerability of the Zimbra Collaboration Suite’s email management system is related to insufficient validation of incoming requests. Exploiting this vulnerability could allow a malicious actor to execute a SRF attack remotely...
The vulnerability of the Sitecore Experience Manager (XM), Experience Platform (XP), and the Experience Commerce (XC) platform for personalized purchasing processes lies in errors in processing the relative path to the catalog. This allows attackers to gain access to arbitrary files and execute arbitrary code.
The vulnerability of the Sitecore Experience Manager XM, Experience Platform XP, and the Experience Commerce XC platform for personalized purchasing processes is related to errors in processing the relative path to the catalog. Exploiting this vulnerability can allow an attacker to gain access to...
The vulnerability of the ext4_feature_set_ok() function in the fs/ext4/super.c module of the Ext4 file system support module in Linux’s operating system allows a hacker to cause a service failure.
The vulnerability of the ext4featuresetok function in the fs/ext4/super.c module of the Linux file system support module is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the OROOT component of the NVIDIA DGX OS workstation operating system allows a hacker to trigger a service failure.
The vulnerability of the OROOT component of the NVIDIA DGX OS workstation operating system for DGX Spark AI systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of Kibana’s visualization data library “Vega” allows attackers to perform cross-site scripting attacks.
The vulnerability of the Vega library used by the Kibana data visualization service is related to the lack of protective measures taken for the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of Inbox COM objects in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of Inbox COM objects in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the Windows Taskbar Live component on Windows operating systems allows a perpetrator to disclose protected information.
The vulnerability of the Windows Taskbar Live component in operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the setRebootScheCfg() function (/cgi-bin/cstecgi.cgi) in the TOTOlink EX1800T Wi-Fi extension software allows a intruder to influence the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the setRptWizardCfg function /cgi-bin/cstecgi.cgi of the TOTOlink EX1800T Wi-Fi extension software is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and...
The vulnerability of the um_rp_autochannel() function in the microprogramming software for Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 allows a hacker to execute arbitrary code.
The vulnerability of the umrpautochannel function in the microprogramming software for Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 lies in the fact that the operation’s output escapes the buffer and is stored in memory when processing the apcliAuthMode2G and apcliAuthMode5G...
The vulnerability of the LDAP protocol implementation in HashiCorp’s Vault and Vault Enterprise archiving platforms allows attackers to circumvent security restrictions and gain unauthorized access to protected information.
The vulnerability of the LDAP protocol implementation in HashiCorp Vault and Vault Enterprise, a platform for archiving corporate information, is related to the improper handling of gaps when processing the usernameasalias parameter. Exploiting this vulnerability can allow an attacker to bypass...
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in their dependence on the reverse DNS resolver, which allows a hacker to cause a service failure.
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the dependence of critical operations on the reverse DNS solution. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...
The vulnerability of the ui_get_input_value() function in Netgear WG302v2 router microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the uigetinputvalue function in Netgear WG302v2 router microprogramming software is related to the lack of measures taken to clean data at the control level when processing the host parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...
The vulnerability of the MediaStream interface in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the MediaStream interface in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially crafted HTML page...
The vulnerability of the Adobe Experience Manager content and media data management system lies in the insufficient protection of the website structure, allowing attackers to execute arbitrary code.
The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the OneDrive file sharing service for the macOS operating system arises from the insecure management of privileges, allowing an attacker to elevate their privileges to root user level.
The vulnerability of the OneDrive file sharing service for the macOS operating system is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root user level...
The vulnerability of the Adobe Substance 3D Viewer application, which allows for the viewing and editing of 3D files, stems from a pointer manipulation issue. This vulnerability allows an attacker to trigger a service failure.
The vulnerability of the Adobe Substance 3D Viewer application for viewing and editing 3D files is related to the handling of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafted malicious file...
The vulnerability of the corporate platform for creating, managing, and processing electronic forms, documents, and business processes within Adobe Experience Manager AEM Forms on JEE lies in its deserialization mechanism’s flaws, allowing attackers to execute arbitrary code.
The vulnerability of the corporate platform for creating, managing, and processing electronic forms, documents, and business processes within Adobe Experience Manager AEM Forms on JEE is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a maliciou...
The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the possibility of an operation occurring outside the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of PDF viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the fact that the processing of JP2 files may lead to data being written beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute...
The vulnerability of the CRM User Management Framework component of the Oracle Common Applications suite, a part of the Oracle E-Business Suite, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the CRM User Management Framework component in the Oracle Common Applications of the Oracle E-Business Suite relates to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Blink rendering module in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Blink module in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure...
The vulnerability of the CI/CD application integration and delivery system provided by JetBrains TeamCity, which stems from the lack of authentication, allows attackers to compromise the confidentiality of protected information.
The vulnerability of the CI/CD application integration and delivery system of JetBrains TeamCity is related to the absence of authentication. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of the protected information...
The vulnerabilities of MobileHMI and IoTWorX Visualizer SCADA systems from GENESIS64 allow a intruder to gain unauthorized access to protected information.
The vulnerability of MobileHMI and IoTWorX Visualizer SCADA systems from GENESIS64 is related to incorrect restrictions on the path name to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the doExecute method in the HPE StoreOnce VSA storage virtualized system allows a attacker to execute arbitrary code.
The vulnerability of the doExecute method in the HPE StoreOnce VSA virtual storage system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability may allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the get_article_urls() function in the KnowledgeBaseWebReader class of the LlamaIndex framework for working with large language models allows a attacker to trigger a service denial.
The vulnerability of the getarticleurls function in the KnowledgeBaseWebReader class of the LlamaIndex framework, which is used for working with large language models, is related to an uncontrolled resource consumption when processing the maxdepth parameter. Exploiting this vulnerability could...
The vulnerability of the BFCache technology used by Google Chrome and Microsoft Edge browsers allows a hacker to gain unauthorized access to protected information.
The vulnerability of the BFCache technology used by Google Chrome and Microsoft Edge is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of the SimpleOne ITSM automation system lies in its ability to use strictly encrypted user data, which allows a malicious actor to compromise the domain name.
The vulnerability of the SimpleOne ITSM automation system relates to the possibility of using strictly encrypted user data. Exploiting this vulnerability could allow a malicious actor to compromise the domain name...
The vulnerability of the PCMan FTP Server relates to the occurrence of operations beyond the buffer boundaries in memory. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the FTP server PMan FTP Server relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the CloudACMunualUpdateUserdata function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3002RH router’s microprogramming system, which allows a hacker to execute arbitrary commands.
The vulnerability of the CloudACMunualUpdateUserdata function in the /cgi-bin/cstecgi.cgi module of the TOTOLINK A3002RH router’s microprogramming system is related to the failure to eliminate special elements used in operating systems commands. Exploiting this vulnerability can allow a malicious...
The vulnerability of the FortiOS operating system in the FortiGate 200F network firewall allows a attacker to execute a brute-force attack.
The vulnerability of the FortiOS operating system for the FortiGate 200F network firewall is related to security mechanism flaws. Exploiting this vulnerability could allow a malicious actor to execute a brute-force attack remotely...
The vulnerability of the function in gf_m2ts_process_pmt of the multimedia platform GPAC, which allows a intruder to cause a service failure
The vulnerability in the gfm2tsprocesspmt function of the multimedia platform GPAC involves copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service failures...
Уязвимость программного обеспечения для удалённого доступа и управления AnyDesk, связанная с недостатками разграничения доступа, позволяющая нарушителю повысить свои привилегии
Уязвимость программного обеспечения для удалённого доступа и управления AnyDesk связана с недостатками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии до уровня root...
The vulnerability of the web interface of the cross-platform FTP server CrushFTP allows a hacker to gain unauthorized access to arbitrary directories and files.
The vulnerability of the cross-platform FTP server CrushFTP lies in the deficiencies of its access control mechanism. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to arbitrary directories and files by sending a specially crafted POST request...
The vulnerability of the E-Staff automated recruitment process system, related to data filtering errors, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the E-Staff recruitment process automation system is related to data filtering errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of Cisco IOS XR operating systems arises from the lack of control over public write permissions for installed application files. This allows attackers to circumvent existing security restrictions.
The vulnerability of Cisco IOS XR operating systems lies in the lack of control over public write permissions for installed application files. Exploiting this vulnerability can allow a perpetrator to circumvent existing security restrictions...
Vulnerability of the dpll_nl_pin_get_dumpit() function in the drivers/dpll/dpll_netlink.c module – A DPLL driver for the Linux operating system that allows a hacker to cause a service failure.
Vulnerability of the dpllnlpingetdumpit function in the drivers/dpll/dpllnetlink.c module – The DPLL driver support in Linux kernels is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of the adv7511_probe() function in the drivers/gpu/drm/bridge/adv7511/adv7511_drv.c kernel module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the adv7511probe function in the drivers/gpu/drm/bridge/adv7511/adv7511drv.c kernel module of the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the setQuickCfgWifiAndLogin() function in the Tenda W18E router software allows a hacker to bypass security restrictions and gain access to read, modify, or delete data.
The vulnerability of the setQuickCfgWifiAndLogin function in the Tenda W18E router’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions and gain access to read, modify, or delete data ...
The vulnerability of the phpgacl/acl_admin.tpl template in the PHP library for managing access in web applications. This is part of the phpGACL system used for managing medical documentation in OpenEMR. It allows attackers to perform cross-site scripting attacks.
The vulnerability of the phpgacl/acladmin.tpl template in the PHP library for managing access in web applications is related to the lack of protective measures taken when processing the action template parameters. Exploiting this vulnerability allows a remote attacker to perform cross-site...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to bypass existing security restrictions
The vulnerability of the Windows operating system’s kernel is related to access control errors. Exploiting this vulnerability can allow an attacker to bypass existing security restrictions...
The vulnerability of the formSetFirewallCfg function in the microprogramming software for Tenda AC18 allows a hacker to trigger a service failure.
The vulnerability of the formSetFirewallCfg function in the Tenda AC18 router microprogramming system is related to buffer overflow during the processing of the firewallEn parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the i2c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the i2c component in the Linux operating system’s kernel is related to improper locking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the gsm_dlci_config() function in the TTY driver (drivers/tty/n_gsm.c) of the Linux kernel allows a hacker to increase their privileges.
The vulnerability of the gsmdlciconfig function in the TTY driver drivers/tty/ngsm.c of the Linux kernel is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the network authentication protocol used by the Firebird software components, “Population Cancer Registry” and “Hospital Cancer Registry,” allows attackers to intercept traffic.
The vulnerability of the network authentication protocol used by the Firebird software’s “Population Cancer Registry” and “Hospital Cancer Registry” components is related to the use of a insecure authentication method called LegacyAuth. Exploiting this vulnerability allows a malicious actor to...
The vulnerability in the web interface of the microprogramming software for wireless client bridges from HPE Aruba Networking 501 allows a attacker to execute arbitrary code in the device’s basic operating system.
The vulnerability of the web interface for managing microprogramming software in HPE Aruba Networking 501 wireless client bridges is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the...
The vulnerability in the web interface for managing device information on the Cisco Common Services Platform Collector allows a attacker to perform XSS attacks.
The vulnerability in the web interface for collecting device information on Cisco Common Services Platform Collector CSPC is related to the failure to remove unacceptable symbols from identifiers on web pages. Exploiting this vulnerability allows a remote attacker to perform XSS attacks...
The vulnerability of the DWFX software file used for viewing 3D models and project documents in Autodesk Navisworks Freedom; the software for modeling and analyzing 3D models in Autodesk Navisworks Simulate; and the software for analyzing, coordinating, and verifying 3D models and project data in Autodesk Navisworks Manage, allows a malicious actor to execute arbitrary code.
The vulnerability of the DWFX software file used for viewing 3D models and project documents in Autodesk Navisworks Freedom, as well as the software for modeling, analyzing, and simulating 3D models in Autodesk Navisworks Simulate, and the software for analyzing, coordinating, and verifying 3D...
The vulnerability of Adobe Connect web conference software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute XSS attacks.
The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute XSS attacks by injecting malicious scripts into form fields...
The vulnerability of the Adobe Document Service component in the SAP NetWeaver AS for Java software for creating and deploying web applications allows a attacker to perform an SSRF attack.
The vulnerability of the Adobe Document Service component in the SAP NetWeaver AS for Java web application development and deployment framework is related to insufficient validation of incoming requests. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack using a...
The vulnerability of the Drupal CMS system’s kernel lies in the insufficient control over the modification of dynamically defined object properties. This allows attackers to delete any file they desire.
The vulnerability of the Drupal CMS system’s kernel is related to insufficient control over the modification of dynamically defined object properties. Exploiting this vulnerability could allow a malicious actor to delete any file at will...