95883 matches found
The vulnerability of the BuildKit container-building software lies in the improper restriction of the path name to the restricted-access directory, which allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the BuildKit container-building software is related to an incorrect limitation on the path to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the graphics processors in Google Chrome and Microsoft Edge allows a hacker to gain unauthorized access to protected information.
The vulnerability of Google Chrome and Microsoft Edge web browsers relates to the use of uninitialized variables. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...
The vulnerability of the Redirected Drive Buffering System (RDBS) allows a perpetrator to cause a service failure.
The vulnerability of the Redirected Drive Buffering System RDBS is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `__unset_online()` function in the drivers/s390/cio/css.c module of the S390 platform’s Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the unsetonline function in the drivers/s390/cio/css.c module of the S390 platform driver for the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the SMB server for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the SMB server for Windows operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the File input component in Google Chrome allows a hacker to replace the user interface.
The vulnerability of the File input component in Google Chrome relates to information representation errors in the user interface. Exploiting this vulnerability could allow an attacker to replace the user interface with a specially created HTML page...
The vulnerability of the Graphics component in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Graphics component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Dnsmasq DNS server, related to errors in the implementation of security checks for standard elements, allows attackers to compromise the integrity of data.
The vulnerability of the Dnsmasq DNS server is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...
The vulnerability of the browser’s Background Fetch API programming interface in Google Chrome allows attackers to disclose protected information.
The vulnerability of the Google Chrome browser’s Background Fetch API programming interface is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a remote attacker to disclose sensitive information through a specially created HTM...
The vulnerability of the NVIDIA NSight Systems performance analysis tool, a software solution for parallel computing on NVIDIA CUDA GPUs, allows an intruder to gain unauthorized access to protected information, enhance their privileges, execute arbitrary code, replace data, or cause system failures.
The vulnerability of the NVIDIA NSight Systems performance analysis tool, a software solution for parallel computing on NVIDIA CUDA GPUs, is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected...
The vulnerability of the User Management Engine component of the SAP NetWeaver Java Application Server web application server allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the User Management Engine component of the SAP NetWeaver Java Application Server web application server is related to insufficiently secure data encryption. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...
The vulnerability of the HttpFoundation component in the Symfony software development and web application management platform allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the HttpFoundation component in the Symfony software development and web application management platform is related to the use of non-canonical URL paths for authentication solutions. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality,...
The vulnerability of the software for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP lies in the lack of authentication procedures. This allows attackers to gain access to read profile parameters.
The vulnerabilities of the software used for developing and executing applications in the ABAP language of SAP NetWeaver Application Server are related to deficiencies in the authentication process. Exploiting these vulnerabilities can allow attackers to gain read access to profile parameters...
The vulnerability of the Core Command Expansion module in the Nagios XI IT infrastructure monitoring tool allows a hacker to execute arbitrary code.
The vulnerability of the Core Command Expansion module in the Nagios XI IT infrastructure monitoring tool is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the ARP protocol implementation in TP-Link AX10 and AX1500 router software allows a attacker to execute arbitrary code.
The vulnerability of the ARP protocol implementation in TP-Link AX10 and AX1500 router microprogramming systems is related to information disclosure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the /boafrm/formSysCmd component in the microprogramming software of TOTOLINK N350R allows a hacker to execute arbitrary commands.
The vulnerability of the /boafrm/formSysCmd component of the TOTOLINK N350R router’s microprogramming system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of the phy_detach() function in the drivers/net/phy/phy_device.c module of Linux kernel allows a hacker to cause a service failure.
The vulnerability of the phydetach function in the drivers/net/phy/phydevice.c module of Linux kernels is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the IBM Aspera Faspex file-sharing application, related to the implementation of security functions at the client side, allows attackers to compromise the integrity of the protected information.
The vulnerability of the IBM Aspera Faspex file-sharing application is related to the implementation of security functions at the client side. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information from a remote location...
The vulnerability of Apache CXF web services, related to uncontrolled resource consumption, allows attackers to cause service failures.
The vulnerability of Apache CXF web services is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the Permissions control element in the Google Chrome browser allows a hacker to replace the user interface.
The vulnerability of the Permissions control element in Google Chrome is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a remote attacker to replace the user interface...
The vulnerability of the get_cur_lang_ver() function in Netgear’s JWNR2000v2 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the getcurlangver function in Netgear JWNR2000v2 router microprogramming software is related to the copying of buffers without checking the size of the input data when processing the host parameter. Exploiting this vulnerability can allow an attacker to compromise the...
The vulnerability of the CoreMedia Playback component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the CoreMedia Playback component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the CI/CD application integration and delivery system provided by JetBrains TeamCity, related to insufficient protection of registration data, allows attackers to disclose protected information.
The vulnerability of the Continuous Integration and Deployment application delivery system CI/CD of TeamCity in JetBrains is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
The vulnerability of the NetworkServlet.getNextTrapPage() function in the system for centrally managing network devices and ports of Advantech iView allows a hacker to execute arbitrary code.
The vulnerability of the NetworkServlet.getNextTrapPage function in the system for centrally managing network devices and ports of Advantech iView is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of software for accessing analytics and planning tools in the IBM Analytics Content Hub, related to the disclosure of information through source code, allows a perpetrator to disclose protected information.
The vulnerability of the software for accessing analytics and planning tools in the IBM Analytics Content Hub is related to the disclosure of information through the source code. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...
The vulnerability of the Public Update Page component in microprogramming software for Ethernet modules WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN allows attackers to enhance their privileges.
The vulnerability of the Public Update Page component in microprogramming software for Ethernet modules WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN is related to the absence of authentication for a critical function. Exploiting this vulnerability can allow an attacker to increase their privilege...
The vulnerability of the formConnectionSetting() function (/goform/formConnectionSetting) in the Wi-Fi range extension software by Belkin, allows a intruder to cause a service failure.
The vulnerability of the formConnectionSetting function /goform/formConnectionSetting of the Belkin F9K1122 Wi-Fi range extender software is due to a buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the ability to read data beyond the buffer in memory, allowing attackers to disclose protected information.
The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the reading of data beyond the buffer boundaries during file processing for PRC formats. Exploiting this vulnerability can allow attackers to disclose protected...
The vulnerability of the formWlanSetupWPS() function (/goform/formWlanSetupWPS) in the Belkin F9K1122 Wi-Fi range extender software allows a intruder to cause a service failure.
The vulnerability of the formWlanSetupWPS function /goform/formWlanSetupWPS of the Belkin F9K1122 Wi-Fi range extender software is due to a buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
The vulnerability of mediatek’s Linux operating system drivers allows a hacker to cause a service failure.
The vulnerability of mediatek’s Linux operating system drivers is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of website structures, allowing attackers to execute arbitrary code.
The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability in Mozilla Firefox and Firefox ESR browsers allows a hacker to execute arbitrary code.
The vulnerability of Mozilla Firefox and Firefox ESR browsers is related to writing beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the j1939_session_deactivate() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the j1939sessiondeactivate function in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the dmaengine kernel component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the dmaengine kernel component in the Linux operating system is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the web_radiusSrv_post() function in PLANET Technology’s microcontroller software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the webradiusSrvpost function in PLANET Technology’s microcontroller software stems from the operation of the function beyond the buffer boundaries in memory when processing the radIpkey parameter. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of SCALANCE W-700 IEEE 802.11ax industrial switches, related to insufficient verification of input data, allows a intruder to execute arbitrary commands.
The vulnerability of SCALANCE W-700 IEEE 802.11ax industrial switches lies in insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the software for centralized backup and disaster recovery management in Dell PowerProtect Data Manager arises from improper code generation. This allows attackers to gain unauthorized access to protected information.
The vulnerability of the software for centralized backup and disaster recovery management in Dell PowerProtect Data Manager is related to improper code generation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the NTPSyncWithHost() function in Totolink’s microprogrammed router software allows a hacker to execute arbitrary code.
The vulnerability of the NTPSyncWithHost function in Totolink router microprogramming software is related to the failure to take measures to neutralize special elements of the hostTime parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Windows Media component in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Windows Media component in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system allows a malicious actor to gain unauthorized access to modify, add, or delete data.
The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to modify, add, or delete data...
The vulnerability of the Apache SeaTunnel data processing software lies in its authentication procedures’ deficiencies, which allow attackers to gain unauthorized access to protected information.
The vulnerability of the Apache SeaTunnel data processing platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the PSL validation mechanism in the Apache HttpClient client module of Apache HttpComponents allows a attacker to perform a CSRF attack.
The vulnerability of the PSL validation mechanism in the Apache HttpClient client module of Apache HttpComponents is related to errors in the certificate authentication process. Exploiting this vulnerability can allow a malicious actor to execute a CSRF attack remotely...
The vulnerability of the ASUS AiCloud cloud platform, related to bypassing authentication by using an alternative path or channel, allows a perpetrator to execute arbitrary commands.
The vulnerability of the ASUS AiCloud cloud platform involves bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafted requests...
The vulnerability of the setUploadUserData() function in the microprogramming software for TOTOLINK CA300-PoE allows a hacker to execute arbitrary commands.
The vulnerability of the setUploadUserData function in the TOTOLINK CA300-PoE router’s microprogramming software is related to the lack of measures taken at the control level during the processing of the FileName parameter. Exploiting this vulnerability allows an attacker operating remotely to...
The vulnerability of the kernel-level driver nvlddmkm.sys from NVIDIA’s graphics processing units, including GeForce, Quadro, NVS, and Tesla, allows attackers to cause system failures or gain unauthorized access to protected information.
The vulnerability of the kernel mode driver nvlddmkm.sys of NVIDIA’s graphics processing units, including GeForce, Quadro, NVS, and Tesla, relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause system failures or gain unauthorized...
The vulnerability of Linksys Velop WHW01’s microprogramming software arises from incorrect pathname restrictions for access to restricted catalogs. This allows attackers to escalate their privileges.
The vulnerability of Linksys Velop WHW01 microprogrammed software lies in the incorrect limitation of the path name to the restricted access directory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of BitLocker’s data protection function in the Microsoft Windows operating system allows attackers to circumvent existing security restrictions.
The vulnerability of BitLocker’s data protection function in the Microsoft Windows operating system is related to a breach of the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...
The vulnerability of the xmlDocGetRootElement() function in the IO/Infovis/vtkXMLTreeReader.cxx component of the VTK image processing library allows a attacker to cause a service failure.
The vulnerability of the xmlDocGetRootElement function in the IO/Infovis/vtkXMLTreeReader.cxx component of the VTK image processing library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of Ivanti Connect Secure, Ivanti Policy Secure, and ZTA Gateways’ network access control devices lies in buffer overflows in the stack, allowing attackers to execute arbitrary code.
The vulnerability of Ivanti Connect Secure, Ivanti Policy Secure, and ZTA Gateways lies in buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...