95883 matches found
The vulnerability lies in the implementation of the `mt_rand()` and `time()` functions in the pearweb package’s PHP classes from the PEAR library. This allows an attacker to gain unauthorized access to protected information or execute arbitrary code.
The vulnerability in the implementation of the mtrand and time functions in the pearweb package’s PHP class library in the PEAR library is related to the use of an insufficiently secure MD5 encryption algorithm. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...
The vulnerability of the WriteMSLImage() function in the coders/msl.c component of the console-based image editing tool ImageMagick allows a hacker to cause a service failure.
The vulnerability of the WriteMSLImage function in the coders/msl.c component of the console-based image editing tool ImageMagick is related to improper memory release before deleting the last reference. Exploiting this vulnerability may allow an attacker to cause a service failure...
The Network Configuration Manager (NCM) software, which is related to the failure to protect the structure of web pages, allows attackers to carry out XSS attacks.
The Network Configuration Manager NCM software is associated with the failure to take measures to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to carry out XSS attacks remotely...
The vulnerability of the httpd daemon in the microprogramming software of TP-Link’s TL-WR940N router allows a hacker to execute arbitrary code.
The vulnerability of the httpd daemon in the microprogramming-based router software from TP-Link, the TL-WR940N, is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the Microsoft Hyper-V Network Switch virtual programmable switch allows a attacker to gain access to protected information.
The vulnerability of the Microsoft Hyper-V Network Switch virtual programmable switch in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created application...
The vulnerability of the microprogramming software used in Zyxel Ethernet switches such as ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, and ZyWALL 1100 lies in the lack of protective measures for website structures. This allows attackers to carry out cross-site scripting attacks.
The vulnerability of the microprogramming software used in Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, and ZyWALL 1100 lies in the lack of protective measures for the website...
The vulnerability of the Grafana monitoring and observation platform, related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges.
The vulnerability of the Grafana monitoring and observation platform, related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The vulnerability in the `ecard_send.php` script of the Admidio membership and access control application allows a perpetrator to execute arbitrary code and gain access to read, modify, or delete data.
The vulnerability in the ecardsend.php script /admprogram/modules/ecards/ecardsend.php of the Admidio membership and access control application relates to the improper elimination of special elements used in SQL queries when processing the ecardrecipients parameter. Exploiting this vulnerability...
The vulnerability of the libhevc library of the Android Media Framework service allows a hacker to execute arbitrary code.
The vulnerability of the libhevc library in the Android operating system’s Media Framework is related to lack of access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability in the services/repository/files/patch.go file of the Git repository management system Gitea allows a perpetrator to execute arbitrary code and gain unauthorized access to protected information.
The vulnerability of the services/repository/files/patch.go file in the Git repository management system Gitea is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain unauthorized access to protected information...
The vulnerability of the edna Chat Center’s customer request processing system, related to the improper handling of exceptional states, allows a violator to determine the true identities of users.
The vulnerability of the edna Chat Center’s customer request processing system is related to the improper handling of exceptional states. Exploiting this vulnerability allows a malicious actor to determine the true identities of users...
The vulnerability of the enable_phantom_plane() function in the drivers/gpu/drm/amd/display/dc/dml2/dml2_mall_phantom.c kernel of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the enablephantomplane function in the drivers/gpu/drm/amd/display/dc/dml2/dml2mallphantom.c kernel of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the FFmpeg multimedia library allows attackers to read arbitrary files or carry out attacks aimed at replacing the source code.
The vulnerability of the FFmpeg multimedia library lies in the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to perform attacks aimed at replacing the source material or reading arbitrary files using the Concat protocol in the HTTP Live Streaming HLS...
The vulnerability of the console-based graphic editor ImageMagick arises from the possibility of an operation exceeding the buffer boundaries in memory, which allows a hacker to trigger a system failure.
The vulnerability of the console-based graphic editor ImageMagick is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the KGSL driver for graphics processors in Qualcomm’s embedded software allows a hacker to enhance their privileges and execute arbitrary code.
The vulnerability of the KGSL driver for graphics processors in Qualcomm’s embedded software lies in the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to elevate their privileges to root level and execute arbitrary code...
The vulnerability of the .NET software platform, related to insufficient validation of output data, allows attackers to increase their privileges.
The vulnerability of the .NET software platform is related to insufficient validation of output data. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the implementations of TLS and SSL protocols in the B&R Automation Runtime and B&R mapp View software for managing and controlling industrial processes allows a perpetrator to compromise the integrity of the protected information.
The vulnerability of the TLS and SSL protocol implementations in B&R Automation Runtime and B&R mapp View software for process control and management involves the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to compromis...
The vulnerability of Eclipse Jetty servlet containers, related to the lack of protection for service data, allows attackers to exploit the protected information.
The vulnerability of Eclipse Jetty servlet containers is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...
The vulnerability of the libhevc component of the Mediaserver service in the Android operating system allows a hacker to trigger memory corruption.
The vulnerability of the libhevc component of the Android operating system’s Mediaserver service arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause memory corruption during the processing of media files and data using...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the linux-headers-2.6.18-6-all-alpha package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the VoIP gateway software Telecom MG, related to insufficient protection of operational data, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the VoIP gateway software of Telecom MG is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the DWG File Parser component of the CADImage plugin for IrfanView, a software for viewing and playing graphic, video, and audio files, allows a malicious actor to execute arbitrary code within the context of the current process.
The vulnerability of the DWG File Parser component in the CADImage plugin for IrfanView software, which is used for viewing and playing graphic, video, and audio files, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an...
The vulnerability of the distributed control system ABB System 800xA, related to insufficient verification of input data, allows a intruder to trigger a service failure.
The vulnerability of the distributed control system ABB System 800xA is related to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to trigger maintenance failures by sending numerous messages...
Vulnerability of the H5O__dtypeDecodeHelper function in the H5Odtype.c file of the HDF5 library, allowing a hacker to cause a service failure.
The vulnerability of the H5Odtypedecodehelper function in the H5Odtype.c file is related to the dereferencing of NULL pointers. Exploiting this vulnerability could allow an attacker to cause service failures remotely...
The vulnerability of the Apache Commons Compress library, related to executing a loop with an unreachable exit condition, allows attackers to compromise the integrity, accessibility, and confidentiality of the protected information.
The vulnerability of the Apache Commons Compress library is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to compromise the integrity, accessibility, and confidentiality of the protected information...
The vulnerability of the Solaris operating system, which allows a hacker to modify data or cause partial service failure.
The vulnerability of the Kernel Cryptography sub-component of the Solaris operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating locally, to gain access to modify, add, or delete data, or cause a partial service failure...
The vulnerability of the TrueConf Server software lies in the lack of authentication for critical functions, allowing attackers to execute arbitrary scripts and increase their privileges.
The vulnerability of the TrueConf Server software is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary scripts and increase their privileges...
The vulnerability of Websoft HCM’s automation software for HR processes stems from insufficient validation of input data, allowing attackers to execute the displayed HTML code.
The vulnerability of Websoft HCM’s automation software for HR processes is related to insufficient verification of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary HTML code by sending a specially crafted POST request...
The vulnerability of the __do_sys_cachestat() function in the mm/filemap.c module of the Linux kernel’s memory management subsystem allows a hacker to access protected information or cause service failures.
The vulnerability of the dosyscachestat function in the mm/filemap.c module of the Linux kernel’s memory management subsystem is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain access to protected information or cause service failures...
The vulnerability of the Linux operating system’s kernel’s media component, which allows a hacker to cause a service failure
The vulnerability of the Linux operating system’s kernel media component is related to the assignment of the NULL pointer in the hantrowatchdog function. Exploiting this vulnerability can allow an attacker to trigger a service failure...
The vulnerability of the SetWanSettings() function in D-Link DIR-823G router software allows a hacker to cause a service failure.
The vulnerability of the SetWanSettings function in the microprogramming software for D–Link DIR-823G routers is related to the issue where the operation’s output escapes the buffer in memory when processing the MacAddress parameter. Exploiting this vulnerability can allow a remote attacker to...
The vulnerabilities of the GPCIDrv and GDrv drivers allow attackers to execute arbitrary code. These drivers are used by the Gigabyte Aorus Engine video card configuration program, the GIGABYTE App Center for application management, and the Extreme Gaming Engine for video card status monitoring.
The vulnerability of the GPCIDrv and GDrv drivers is related to the open IOCTL mechanism, which lacks sufficient access control. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Wi-Fi driver microprogramming software for MediaTek’s MC7603E, MC7610, MC7612, MC7613, MC7615, MC7620, MC7622, MC7628, MC7629, and MC7915 allows attackers to enhance their privileges.
The vulnerability of the Wi-Fi driver microprogramming software for MediaTek’s MC7603E, MC7610, MC7612, MC7613, MC7615, MC7620, MC7622, MC7628, MC7629, and MC7915 lies in the reading of data outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain elevate...
The vulnerability of the Windows Manager extensions of Microsoft Edge and Google Chrome allows a hacker to execute arbitrary code.
The vulnerability of the Windows Manager extensions in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
The vulnerability in the virtual network adapter vmxnet3 of VMware ESXi, VMware Workstation, and VMware Fusion allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the virtual network adapter vmxnet3 in VMware ESXi, VMware Workstation, and VMware Fusion lies in the issue of data writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the ActUWzd.dll library component of the Mitsubishi MX Component 3 system for data collection and process control in industrial automation systems, allowing a hacker to execute arbitrary code.
The vulnerability of the ActUWzd.dll library component of the Mitsubishi MX Component 3 system used for data collection and process control in Citect SCADA is due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely using a long string...
The vulnerability of Microsoft Exchange Server servers, related to access control errors, allows attackers to increase their privileges.
The vulnerability of Microsoft Exchange Server is related to access control errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability of the lz4::decompress function in the Graphite library used by Mozilla Firefox and Mozilla Firefox ESR browsers allows a hacker to cause a service failure or execute arbitrary code.
The vulnerability of the lz4::decompress function in the Graphite library of Mozilla Firefox and Mozilla Firefox ESR browsers is caused by a buffer overflow in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...
The vulnerability of the Postgresql database management system in the Astra Linux operating system allows a perpetrator to gain access to confidential data and cause service interruptions.
The vulnerability of the Postgresql database management system in the Astra Linux operating system is related to an error in the interaction with LDAP via parsec calls when retrieving user security attributes. Exploiting this vulnerability allows a malicious actor to gain access to information...
The vulnerability of the CodeScoring software development platform lies in its ability to disclose sensitive information in error messages, allowing a privileged user to expose protected information.
The vulnerability of the CodeScoring software development platform relates to the possibility of exposing sensitive information in error messages. Exploiting this vulnerability could allow a malicious actor, operating remotely with elevated privileges, to disclose protected information...
The vulnerability of messaging and video conferencing tools arises from incorrect restrictions on the path to the restricted catalog, allowing attackers to disclose protected information.
The vulnerability of the Message and Video Conference Messaging tool is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability can allow a malicious actor to disclose protected information...
The vulnerability of Adobe InDesign’s automation tool for computer design lies in the ability to write beyond the buffer limit in memory, allowing attackers to execute arbitrary code.
The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...
The vulnerability of the Craft CMS content management system lies in the improper restriction on the path to the restricted catalog. This allows a hacker to execute arbitrary code or perform Server Side Template Injection (SSTI) attacks.
The vulnerability of the Craft CMS content management system is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or perform Server Side Template Injection SSTI attacks...
The vulnerability of the Adobe Animate software for creating multimedia and computer animations, related to integer overflow, allows attackers to execute arbitrary code.
The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the SCADA system “KRUG-2000” software, related to insufficient verification of script integrity, allows a perpetrator to trigger a service failure.
The vulnerability of the SCADA system “KRUG-2000” software is related to insufficient verification of the integrity of scripts. Exploiting this vulnerability can allow an intruder to cause a service failure...
The vulnerability of the Cisco Jabber Client Framework for Mac, related to permission handling errors, allows a perpetrator to execute arbitrary code.
The vulnerability of the Cisco Jabber Client Framework for Mac relates to permission processing errors. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...
The vulnerability of the pitchmark tool in the Edinburgh Speech Tool Library allows a perpetrator to trigger a service failure.
The vulnerability of the pitchmark tool in the Edinburgh Speech Tool Library is related to initialization errors. Exploiting this vulnerability can allow attackers to cause service failures in applications by entering specially crafted data...
The vulnerabilities in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel allow a hacker to cause a service failure.
The vulnerability in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the ASHLAR encoder in the console-based graphic editor ImageMagic, related to incorrect restrictions on the path name to the directory, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the ASHLAR encoder in the console-based ImageMagick graphics editor is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
The vulnerability of the tools/tiffcrop.c component in the libtiff library allows a hacker to cause a service failure.
The vulnerability of the tools/tiffcrop.c component in the libtiff library is related to a mistake in releasing memory that has already been released before. Exploiting this vulnerability could allow an attacker to cause a service failure...