98239 matches found
Cisco Small Business RV340 Router Privilege Escalation
The vulnerability of the web interface of Cisco Small Business RV340, RV340W, RV345, and RV345P microprogramming software routers is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to elevate their privileges to the...
Cisco Small Business Router Check Function
The vulnerability of the microprogramming software-based image verification function in Cisco Small Business RV160, RV160W, RV260, RV260P, RV260W, RV340, RV340W, RV345, and RV345P routers is related to improper verification of the cryptographic signature. Exploiting this vulnerability can allow...
CAPITAL VSTAR APOGEE MBC APOGEE MEC APOGEE PXC TAL
The vulnerability of microprogrammed software for controllers CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus is related to errors in processing SACK TCP packets. Exploiting this vulnerability can allow a remote attacker to gain access to protected...
Cisco Expressway Series API Re-record Root User
The vulnerability of the API of the Cisco Expressway Series and Cisco Telepresence VCS conference communication devices relates to insufficient validation of command arguments entered by users. Exploiting this vulnerability allows a malicious actor to re-write any files on the underlying operatin...
NETGEAR Router Command Injection
The vulnerability of NETGEAR’s integrated routing software devices such as R7850, R7900P, R7960P, R8000, R8000P, RAX200, RAX75, RAX80, RBK852, RBR850, and RBS850 lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
NETGEAR XR300 Router Command Injection
The vulnerability of NETGEAR XR300, R7000P, and R6900P router’s built-in software lies in the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
NETGEAR Router Command Injection
The vulnerability of NETGEAR’s integrated routing software devices such as R7850, R7900P, R7960P, R8000, R8000P, RAX200, RAX75, RAX80, RBK852, RBR850, and RBS850 lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
IDEMIA Biometric Authentication Bypass
The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software is related to the absence of authentication. Exploiting this vulnerability could allow a malicious actor to bypass authentication and cause service failures...
NETGEAR Wi-Fi Router Command Injection
The vulnerability of NETGEAR’s Wi-Fi router software, including models CBR750, RBK852, RBR850, and RBS850, lies in insufficient cleaning of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Dallas Lock Linux Memory Release Error DoS
The vulnerability of the Dallas Lock Linux event registration subsystem is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a system failure by injecting a specially created executable script into the operating system...
Azure Active Directory Authentication Flaw
The vulnerabilities of the Azure Active Directory AAD identity management and protection platform, the Azure Automation service, the Azure Site Recovery disaster recovery tool, and the Azure Migrate data transfer service are related to authentication process flaws. Exploiting these vulnerabilitie...
Siemens Solid Edge Viewer Code Execution
The vulnerability of the Siemens Solid Edge Viewer application, a tool for design and simulation, is related to the use of memory after it is freed during OBJ file syntax analysis. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created malicio...
SAP NetWeaver Visual Composer Privilege Escalation Command Injection
The vulnerability of the Visual Composer browser-based modeling tool of the SAP NetWeaver software integration platform is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow a remote attacker to enhance their privileges, execute arbitrary commands, or cau...
TSWbPrxy Component Privilege Escalation
The vulnerability of the TSWbPrxy component in Windows operating systems is related to deficiencies in path validation for restricted access directories. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...
Siemens Solid Edge Viewer Code Execution
The vulnerability of the Siemens Solid Edge Viewer application, a tool for design and simulation, is related to the use of memory after it is freed during OBJ file syntax analysis. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created malicio...
Zhuhai Jieli ATS2815 Bluetooth Classic Input Verification DoS
The vulnerability of the Bluetooth Classic microprogramming device implementations of Zhuhai Jieli ATS2815 and ATS2819 exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures through the created LMP...
VPXD Service DoS
The vulnerability of the VPXD service Virtual Provisioning X Daemon, a management tool for VMware vCenter Server’s virtual infrastructure, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a...
VMware Management Privilege Escalation
The vulnerability of the management tool for virtual infrastructure, VMware vCenter Server, and the virtualization platform, VMware Cloud Foundation, is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to increase their privileges...
phpList XSS
The vulnerability of the phpList mailing list management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by creating a new username in the “Login Name” field of the...
Apache Tomcat DoS
The vulnerability of the non-blocking I/O implementation of the Apache Tomcat application server is related to deficiencies in handling exceptional conditions. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
SAP NetWeaver Integration Platform Session Interception
The vulnerability of the MDT software integration platform for SAP NetWeaver is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor, operating remotely, to intercept the session of an administrator or user of the w...
VMware Carbon Black App Control Auth Bypass
The vulnerability of the VMware Carbon Black App Control server is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...
Cisco ASA CLI Command Injection
The vulnerability of the command-line interface CLI of Cisco Adaptive Security Appliance Software ASA and Cisco Firepower Threat Defense FTD lies in the lack of measures to neutralize the special elements used in operating system commands. Exploiting this vulnerability can allow attackers to...
SonicWall Email Security Privilege Management
The vulnerability of SonicWall Email Security and SonicWall Hosted Email Security software-related to insecure privilege management. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Citrix XenMobile Server Path Restriction Unauthorized Access
The vulnerability of the Citrix XenMobile Server, a system for managing corporate mobile devices, is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Adobe Photoshop Buffer Overflow RCE
The vulnerability of the Adobe Photoshop graphic editor is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Advantech BB-ERT351 Web Interface Password Disclosure
The vulnerability of the web interface of the Advantech BB-ERT351 network router lies in the absence of a mechanism for masking passwords when they are displayed in the web interface. Exploiting this vulnerability can allow an attacker to disclose passwords from network services such as PPTP and...
tcpdump Privilege Escalation
The vulnerability of the tcpdump tool for capturing and analyzing network traffic in a software-defined Cisco SD-WAN network is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...
microprogramming software Buffer Overflow
The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to writing beyond the buffer memory boundaries. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...
Sample apps Component Unauthorized Access
The vulnerability of the Sample apps component of the Oracle WebLogic Server application server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or to modify, add, or...
RemoteFX vGPU Windows Code Execution
The vulnerability of the RemoteFX vGPU component in the Microsoft Hyper-V hardware virtualization system’s operating system Windows exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted...
OpenWrt relayd Buffer Overflow
The vulnerability of the relayd function in the embedded operating system OpenWrt relates to reading data beyond the buffer limit. Exploiting this vulnerability can allow a remote attacker to cause a buffer overflow...
Google Chrome Data Compromise
The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise data integrity through a specially crafted HTML page...
Google Chrome Use-After-Free
The vulnerability of Google Chrome relates to the use of memory after it is freed in media operations. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions through a specially created HTML page...
RSA BSAFE Micro Edition
The vulnerabilities of the RSA BSAFE Micro Edition Suite and Oracle Security Service, the Oracle Database Server database management system, the Oracle Communications IP Service Activator network software, and the Enterprise Manager Ops Center virtualization management system are related to the u...
Blender Full Integer Overflow Code Execution
The vulnerability of the animation reproduction function in Blender’s 3D computer graphics software is caused by a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created AVI file...
PostgreSQL INSERT ON CONFLICT DoS
The vulnerability of the “INSERT ... ON CONFLICT DO UPDATE” command in the PostgreSQL database management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
IOx Application Environment Privilege Escalation
The vulnerability in the IOx application environment for the Cisco IOS operating system is related to errors during role-based access control checks. Exploiting this vulnerability allows a malicious actor to elevate their privileges to the root level...
Cisco NX-OS DoS
The vulnerability of the Cisco Fabric Services component of the Cisco NX-OS operating system is related to errors in processing TCP packets. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Sound eXchange audio editor Channel Start DoS
The vulnerability of the channelstart function in the remix.c script of the Sound eXchange audio editor is related to a serious overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
Secret Net Studio Antivirus DoS
The vulnerability in the antivirus component of the Secret Net Studio information protection system is related to buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
Elastic Services Controller Authentication Bypass Code Execution
The vulnerability of the Elastic Services Controller’s network management interface is related to errors in checking API requests. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures and execute arbitrary code by sending a specially crafted request to the RE...
Cisco Wireless LAN Controller Configuration DoS
Multiple vulnerabilities exist in the configuration function of the administrative graphical interface of Cisco Wireless LAN Controller microprogramming system. These vulnerabilities arise due to insufficient validation of input data. Exploitation of these vulnerabilities could allow a malicious...
Oracle Identity Analytics Unauthorized Access
The vulnerability of the Core Components of the Oracle Identity Analytics application management application is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to data using the HTTP protocol...
Cisco IP Phone Web Interface Arbitrary Code Injection Disclosure
The vulnerability of the web interface of Cisco IP Phone 8800 Series software lies in errors in the validation of data provided by users. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the web page that is loaded, or to disclose protected information...
Microsoft JET Database Engine Code Execution
The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
Microsoft Exchange Server Memory Object Execution Code
The vulnerability of Microsoft Exchange Server exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the system user by sending a specially crafted email message...
NVIDIA Graphics Drivers Root Code Execution
The vulnerability of the NVIDIA Graphics Drivers component for the Mac OS X operating system is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability allows an attacker to execute arbitrary code with kernel privileges through a specially...
MatrixSSL Buffer Overflow
The vulnerability of the MatrixSSL information encryption software arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a X.509 certificate with a specially crafted “Subject Alt Name”...
Git Arbitrary Command Execution
The vulnerability of the distributed Git version control system is related to the use of insecure Perl scripts for supporting subcommands such as cvsserver. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands on behalf of the git user remotely...