The vulnerability of the XWiki platform for creating collaborative web applications lies in errors that occur when using privileged application programming interfaces (APIs). This allows a malicious individual to gain access to read, modify, and delete user accounts.

The vulnerability of the XWiki Platform relates to errors that occur when using privileged application programming interfaces APIs. Exploiting this vulnerability can allow a malicious actor to gain access to read, modify, and delete user accounts...

The vulnerability of the formWifiBasicSet() function in the microprogramming software for Tenda F1202 allows a hacker to manipulate the accessibility of protected information.

The vulnerability of the formWifiBasicSet function in the Tenda F1202 router’s microprogramming software is related to the operation that goes beyond the buffer in memory when processing the security parameter. Exploiting this vulnerability could allow an attacker to compromise the accessibility ...

Vulnerability of the atomisp_alloc_css_stat_bufs() function in the drivers/staging/media/atomisp/pci/atomisp_ioctl.c module – This driver for Intel Atom-core devices in the Linux operating system allows a hacker to trigger a service failure.

Vulnerability of the atomispalloccssstatbufs function in the drivers/staging/media/atomisp/pci/atomispioctl.c module – The driver for Intel Atom-based devices in the Linux operating system is vulnerable to a vulnerability where memory previously released is re-released. Exploiting this...

The vulnerability of the ext4handle_error() function in the fs/ext4/super.c module of the Linux file system support module allows a hacker to trigger a service failure.

The vulnerability of the ext4handleerror function in the fs/ext4/super.c module of the Linux file system support module is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gitRepo function in the Kubernetes cluster management software allows a attacker to influence the confidentiality and integrity of the protected information.

The vulnerability of the gitRepo function in the Kubernetes cluster management software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to influence the confidentiality and integrity of the protected information...

The vulnerability of Cobalt Ashlar-Vellum’s software-based parametric automated design and 3D modeling capabilities lies in its ability to exploit memory after release, allowing an attacker to execute arbitrary code.

The vulnerability of Cobalt Ashlar-Vellum’s parametric automated design and 3D modeling software lies in its ability to exploit memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the current process...

The vulnerability of the Qnap network device support automation system is related to errors in the authentication process. This error allows a malicious user to gain unauthorized access to the device.

The vulnerability of the Qnap network device support automation system is related to errors in the authentication process for certificates. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device remotely...

The vulnerability of the Intel QuickAssist Technology (QAT) driver package arises from insufficient validation of input data, allowing a hacker to trigger a service failure.

The vulnerability of the Intel QuickAssist Technology QAT driver package is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the web interface for managing micro-program software on Cisco Expressway allows a attacker to perform XSS attacks.

The vulnerability in the web interface for managing microprogramming software in Cisco Expressway is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of Windows operating system DHCP clients allows a perpetrator to execute arbitrary code.

The vulnerability of DHCP clients of Windows operating systems relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the installer for Microsoft Visual Studio allows a hacker to increase their privileges.

The vulnerability of the installer of the Microsoft Visual Studio software is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a perpetrator to enhance their privileges...

The vulnerability of the Microsoft Digest Authentication (wDigest) authentication mechanism in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Digest Authentication wDigest authentication mechanism in Windows operating systems is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Launch Services interface for macOS operating systems allows attackers to circumvent security restrictions.

The vulnerability of the Launch Services interface for macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator to circumvent security restrictions...

The vulnerability of the Eltex SMG-1016M router’s microprogramming software arises from the lack of measures to neutralize special elements, allowing a intruder to execute arbitrary codes.

The vulnerability of the Eltex SMG-1016M router’s microprogramming software exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes...

The vulnerability of the Linux operating system’s kernel component “perf”, which allows a hacker to trigger a service failure

The vulnerability of the perf component in the Linux operating system’s kernel is related to the operation of writing data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Strapi content management system, related to the lack of protective measures for web pages, allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the CMS Strapi content management platform, related to the lack of security measures for web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code by loading a specially crafted PDF file remotely...

The vulnerability in the implementation of the cc_SendCcImsInfoIndMsg function in the cc_MmConManagement.c file of the Android operating system of Pixel phones allows a hacker to execute arbitrary code.

The vulnerability in the implementation of the ccSendCcImsInfoIndMsg function in the ccMmConManagement.c file of the Android operating system for Pixel phones is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute...

The vulnerability of the formSetCfm() function in the Tenda AC18 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetCfm function in the Tenda AC18 router’s microprogramming software is related to the issue where the write operation goes beyond the buffer boundaries in memory when processing the funcpara1 parameter. Exploiting this vulnerability allows a remote attacker to execut...

The vulnerability of the server for the Continuous Integration and Delivery system (CI/CD) of GoCD arises from incorrect restrictions on XML references to external objects. This allows attackers to perform XXE attacks.

The vulnerability of the CI/CD server of GoCD is related to an incorrect restriction on XML references to external objects. Exploiting this vulnerability allows a malicious actor to perform XXE attacks remotely...

The vulnerability of the Entity Form Steps module in the Drupal CMS system, related to the lack of protective measures for website structures, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Entity Form Steps module in the Drupal CMS system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Media Framework component of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Media Framework component in the Android operating system relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the SSH configuration function on SonicOS operating systems allows a hacker to perform an SSRF attack.

The vulnerability of the SSH configuration function in SonicOS operating systems is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

The vulnerability of the software tool for collecting network and application performance data from Cisco ThousandEyes Endpoint Agent, related to errors in the certificate validation process, allows attackers to escalate their privileges.

The vulnerability of the software tool for collecting network performance and Cisco ThousandEyes Endpoint Agent application data is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability in the web interface of the Cisco Crosswork Network Controller (CNC) allows a attacker to execute XSS attacks.

The vulnerability in the web interface of the Cisco Crosswork Network Controller CNC management interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the UDP packet verification mechanism in microprogramming software for Cisco SD-WAN vEdge allows a attacker to trigger a service failure.

The vulnerability of the UDP packet verification mechanism in Cisco SD-WAN vEdge microprogramming software lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially...

The vulnerability of the Advanced Payment Management component of the SAP S/4HANA Finance software allows a perpetrator to enhance their privileges.

The vulnerability of the Advanced Payment Management component of the SAP S/4HANA Finance financial management software is related to authentication breaches. Exploiting this vulnerability can allow attackers who operate remotely to enhance their privileges...

The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment relates to the execution of operations beyond the buffer in memory when processing WRL files. Exploiting this vulnerability can allow an attacker to execu...

The vulnerability in the getSyslogFile function of the mainfunction.cgi web interface of the DrayTek Vigor router software allows a malicious individual to gain unauthorized access to confidential system files.

The vulnerability of the getSyslogFile function in the mainfunction.cgi web interface of the DrayTek Vigor router software is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in buffer overflows in the stack, which allows attackers to trigger a service failure.

The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the network management system for monitoring industrial networks in Siemens SINEC NMS lies in the improper assignment of permissions to critical resources. This allows a perpetrator to write arbitrary data to any location in the host’s file system.

The vulnerability of the Siemens SINEC NMS network management system for monitoring industrial networks is related to the improper assignment of permissions for critical resources. The application contains a database that does not restrict user rights. Exploiting this vulnerability allows a hacke...

The vulnerability of Ivanti Connect Secure and Ivanti Policy Secure, which are network access control tools, stems from the failure to take measures to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary code.

The vulnerability of the Ivanti Connect Secure and Ivanti Policy Secure network access control tools is related to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary co...

The vulnerability of the lis3lv02d_i2c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the lis3lv02di2c component in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the formSetDeviceName() function (/goform/SetOnlineDevName) in the Tenda AC15 router’s microprogramming software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the formSetDeviceName function /goform/SetOnlineDevName in the Tenda AC15 router’s microprogramming software is related to the issue where the operation exits the buffer boundaries in memory when processing the devName parameter. Exploiting this vulnerability could allow a...

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to reading beyond the buffer boundary in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the current user, using a specially created file...

The vulnerability of the BDF File Handler component in the software platform for numerical modeling and analysis of Simcenter Nastran products allows a hacker to execute arbitrary code.

The vulnerability of the BDF File Handler component in the software platform for numerical modeling and analysis of Simcenter Nastran products is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of components related to DRM, AMD, and display kernels in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of components such as DRM, AMD, and display kernels in the Linux operating system is related to the assignment of the NULL pointer in the edpsetreplayallowactive function. Exploiting this vulnerability can allow a hacker to trigger a service failure...

The vulnerability of the DRM component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel DRM component is related to errors in reading data beyond the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel Wi-Fi component, related to the allocation of unlimited memory, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel Wi-Fi component is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a hacker to cause a service failure...

The vulnerability of the Zimbra Collaboration Suite’s email management system, which stems from insufficient validation of incoming requests, allows attackers to carry out SRF attacks.

The vulnerability of the Zimbra Collaboration Suite’s email management system is related to insufficient validation of incoming requests. Exploiting this vulnerability could allow a malicious actor to carry out a SRF attack remotely...

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems is related to the execution of operations beyond the buffer in memory due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the use of an insecure search path, allowing a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the use of an insecure search path. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the setTracerouteCfg() function in the microprogramming software for TOTOLINK AC1200 T8 routers allows a intruder to execute any command they desire.

The vulnerability of the setTracerouteCfg function in the TOTOLINK AC1200 T8 router software exists because measures to neutralize the special elements used in the operating system command have not been taken. Exploiting this vulnerability could allow a remote attacker to execute arbitrary comman...

The vulnerability of the Extensions component of the Google Chrome browser allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the Google Chrome browser’s Extensions component relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause a denial-of-service attack through a specially created HTML page...

The vulnerability of the cgi_get_cooliris() function (/cgi-bin/photocenter_mgr.cgi) in the microprogramming software of D-Link devices such as DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 allows a hacker to execute arbitrary commands.

The vulnerability of the cgigetcooliris function /cgi-bin/photocentermgr.cgi in the microprogramming software of D-Link devices such as DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4...

The vulnerability of the Updater component of the Google Chrome browser, which allows a hacker to escalate their privileges.

The vulnerability of the Updater component in Google Chrome relates to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to enhance their privileges by sending a specially crafted malicious file...

The vulnerability of VMware vCenter Server’s software management system, related to deficiencies in access control, allows attackers to increase their privileges.

The vulnerability of VMware vCenter Server’s software management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by sending specially crafted malware packages remotely...

The vulnerability of the universal monitoring system Zabbix, related to the replacement of an unreliable indicator, allows a intruder to execute arbitrary code.

The vulnerability of the Zabbix universal monitoring system lies in the ability to directly modify memory pointers in the JavaScript engine. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Ingress controller in the Kubernetes cluster ingress-nginx, related to errors in processing Ingress object annotations, allows a hacker to increase their privileges.

The vulnerability of the ingress controller in the Kubernetes cluster ingress-nginx is related to errors in processing Ingress object annotations. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the Allocation Rules component in the financial management tool of the Oracle Process Manufacturing Financials system, a part of the Oracle E-Business Suite. This vulnerability allows an intruder to gain unauthorized access to read, modify, or delete data.

The vulnerability of the Allocation Rules component in the financial management tool of the Oracle Process Manufacturing Financials system, part of the Oracle E-Business Suite, is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker,...