98239 matches found
NGINX QUIC DoS
The vulnerability of HTTP/3 QUIC in NGINX Plus and NGINX OSS web servers is related to the swapping of the zero pointer. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted requests...
XWiki Platform User Registration Code Execution
The vulnerability of the user registration function of the XWiki Platform is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
aiohttp HTTP Request Hijacking
The vulnerability of the aiohttp HTTP client is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to perform an “HTTP request hijacking” attack...
Rapid SCADA Path Traversal
The vulnerability of the SCADA system Rapid SCADA is related to incorrect restrictions on the path name to the restricted access catalog when extracting files from archives. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted HTTP reques...
Rapid SCADA Privilege Escalation
The vulnerability of the SCADA system Rapid SCADA is related to the incorrect assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges...
Rapid SCADA Full Control
The vulnerability of the SCADA system Rapid SCADA is related to the use of rigidly encoded accounting data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full control over the system...
Jenkins GitLab Branch Source Plugin Auth Bypass Info Disclosure
The vulnerability of the Jenkins GitLab Branch Source Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to confidential information...
Juniper Networks J-Web Auth Bypass Info Disclosure
The vulnerability of the J-Web interface in Juniper Networks Junos OS operating systems is related to the lack of authentication for critical functions and deficiencies in the error reporting mechanism. Exploiting this vulnerability can allow a malicious actor to gain access to confidential...
Linux Rose Protocol Use-After-Free
The vulnerability of the roseioctl function in the net/rose/afrose.c module, which is part of the Amateur Radio X.25 PLP Rose protocol implementation in the Linux operating system, relates to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this...
Qualcomm Embedded Software Assert Failure
The vulnerability of embedded software developed for Qualcomm chips lies in the improper implementation of the channel bandwidth division mechanism and the switching between subbands when performing Beam Switching. This occurs due to the use of the assert function. Exploiting this vulnerability c...
HDF5 File Processing Library Heap Buffer Overflow DoS
The vulnerability of the H5Dchunk.c component in the HDF5 file processing library is related to the lack of checks for division by zero. Exploiting this vulnerability can allow a remote attacker to cause a service failure using a specially created HDF file...
LinuxASMCallGraph Unlimited Loading Arbitrary Code
The vulnerability of the LinuxASMCallGraph graph-building software lies in the ability to download unlimited quantities of dangerous files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by downloading a specially created ZIP file remotely...
USB Peripheral Code Execution
The vulnerability of the interface for connecting peripheral devices via USB in Google Chrome browsers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created web page...
Google Chrome Downloads Unauthorized Access
The vulnerability of the Downloads component of the Google Chrome browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially...
Clario VPN Data Transmission
The vulnerability of the Clario VPN client relates to the lack of protection for transmitted data. Exploiting this vulnerability allows a hacker to send arbitrary IP traffic as plain text beyond the VPN tunnel...
Supermicro X11 series BMC IPMI XSS
The vulnerability in the web interface of BMC IPMI Supermicro X11 series servers exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using specially crafted GET requests...
SolarView Compact conf_mail.php Arbitrary Command Execution
The vulnerability of the confmail.php component in the microprogramming software for solar power measurement, data display, and storage in SolarView Compact exists due to the lack of measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability can...
FortiOS Graphical Interface XSS
The vulnerability of the graphical interface of FortiOS operating systems and the proxy server used for protecting against Internet attacks FortiProxy exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute...
ioLogik Web Server Cookie Session Access
The vulnerability of the web server of the programmable logical controller ioLogik relates to the use of cookies for storing confidential information without the HttpOnly flag. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the protected...
Cast component Google Chrome Code Execution
The vulnerability of the Cast component of the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial-of-service attack by loading a specially created web page...
SIMATIC MV540/MV550/MV560 Resource Consumption DoS
The vulnerability of the microprogrammed software of SIMATIC MV540, MV550, and MV560 barcode readers is related to an uncontrolled resource consumption during Ethernet frame processing. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Cloud Files Mini Filter driver Privilege Escalation
The vulnerability of the Cloud Files Mini Filter driver for the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Microsoft Dynamics 365 for Finance and Operations Spear Phishing
The vulnerability of the Microsoft Dynamics 365 for Finance and Operations resource planning software is related to errors in information presentation by the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...
ABB eSOMS Code Execution
The vulnerability of the ABB eSOMS software for managing production processes is related to the absence of the X-Content-Type-Options Header in the HTTP response. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
D-Link DIR-2150 Router Code Execution
The vulnerability of the SetSysEmailSettings function in the application software interface of D-Link DIR-2150 router microprogramming devices is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially...
ABB eSOMS XSS
The vulnerability of the ABB eSOMS production process management software is related to the absence of the X-XSS-Protection header in HTTP responses. Exploiting this vulnerability allows a remote attacker to perform XSS attacks...
Cisco TelePresence Collaboration Endpoint CLI Access Control Rerecord Files
The vulnerability of the command-line interface CLI of microprogramming software for Cisco TelePresence Collaboration Endpoint devices and Cisco RoomOS operating systems is related to access control deficiencies. Exploiting this vulnerability could allow a attacker to re-record arbitrary files...
IBM QRadar WinCollect Agent Privilege Escalation Command Execution
The vulnerability of the event forwarding mechanism in IBM QRadar WinCollect Agent is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary commands...
D-Link DIR-2150 Router Code Execution
The vulnerability of the SetTriggerPPPoEValidate function in the application software interface of D-Link DIR-2150 router microprogramming devices is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially...
Aruba EdgeConnect Enterprise XSS
The vulnerability in the web interface of the Aruba EdgeConnect Enterprise network management platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a specially created link...
SNC_io parser Heap Buffer Overflow DoS
Vulnerability of SNCio parser: The function readsedge in the NefS2/SNCio parser component relies on the snext function from the CGAL algorithm library. This vulnerability is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data...
Windows ALPC Privilege Escalation
The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code with SYSTEM privileges...
D-Link DIR-1935 Router Code Execution
The vulnerability of the web interface for managing D-Link DIR-1935 microprogramming software lies in the buffer overflow that occurs during the processing of the SOAPAction header. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
D-Link DIR-1935 Router Code Execution
The vulnerability of the SetSysEmailSettings function in the web interface for managing D-Link DIR-1935 router microprogramming software is related to the lack of measures taken to sanitize the input data entered by the user in the input field. Exploiting this vulnerability can allow a remote...
Microsoft DWM Core Library Privilege Escalation
The vulnerability of the Microsoft DWM Core Library on Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
RTSP microprogramming DoS
The vulnerability of the RTSP-based microprogramming software for IP cameras such as VPort P16-1MP-M12, VPort P16-1MP-M12-IR, and VPort P06-1MP-M12 lies in the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Mozilla Firefox Resource Management DoS
The vulnerability of the Mozilla Firefox browser is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Eclipse Jetty Information Disclosure
The vulnerability of Eclipse Jetty servlet containers is related to errors in information processing. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Measuresoft ScadaPro Server ActiveX Privilege Escalation
The vulnerability of the ActiveX control used by SCADA servers of Measuresoft ScadaPro Server and ScadaPro Server Client is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
AVEVA Edge Script Creation Code Execution
The vulnerability of the SCADA system AVEVA Edge’s script creation function is related to insufficient warnings about dangerous actions. Exploiting this vulnerability allows a perpetrator to execute arbitrary codes...
QTS Data Compromise
The vulnerability of the QTS operating system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality and integrity of information...
Zoom Client Man-in-the-Middle
The vulnerability of clients for conducting real-time audio and video conferences using Zoom Client for Meetings on Android, iOS, Linux, macOS, and Windows stems from an improper check of the host name during the request to switch servers. Exploiting this vulnerability allows a remote attacker to...
QEMU Hardware Emulation Heap Buffer Overflow DoS
The vulnerability of the lsidomsgout function hw/scsi/lsi53c895a.c in the QEMU hardware emulation software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a system failure...
SheetJS Resource Consumption DoS
The vulnerability of the SheetJS and SheetJS Pro software lies in their uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause a service failure by using a specially crafted xlsx file that is incorrectly processed...
networkd-dispatcher RCE
The vulnerability of the networkd-dispatcher component, which manages connection states and initializes services within Systemd on Linux operating systems, exists due to an incorrect path name limitation for the restricted access directory. Exploiting this vulnerability could allow an attacker to...
Cisco Small Business Router Update Module Certificate Bypass
The vulnerability of the update module for microprogramming software of Cisco Small Business routers such as RV160, RV160W, RV260, RV260P, RV260W, RV340, RV340W, RV345, and RV345P is related to improper verification of the certificate authenticity. Exploiting this vulnerability allows a malicious...
Cisco Small Business RV340 Router Privilege Escalation
The vulnerability of the web interface of Cisco Small Business RV340, RV340W, RV345, and RV345P microprogramming software routers is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to elevate their privileges to the...
Cisco Small Business Router Check Function
The vulnerability of the microprogramming software-based image verification function in Cisco Small Business RV160, RV160W, RV260, RV260P, RV260W, RV340, RV340W, RV345, and RV345P routers is related to improper verification of the cryptographic signature. Exploiting this vulnerability can allow...
CAPITAL VSTAR APOGEE MBC APOGEE MEC APOGEE PXC TAL
The vulnerability of microprogrammed software for controllers CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus is related to errors in processing SACK TCP packets. Exploiting this vulnerability can allow a remote attacker to gain access to protected...
Cisco Expressway Series API Re-record Root User
The vulnerability of the API of the Cisco Expressway Series and Cisco Telepresence VCS conference communication devices relates to insufficient validation of command arguments entered by users. Exploiting this vulnerability allows a malicious actor to re-write any files on the underlying operatin...