Media Foundation Dolby Digital Atmos Decoders Code Execution

The vulnerability of the Media Foundation Dolby Digital Atmos Decoders in the Windows operating system is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

SONICWALL Ethernet switch control interface Factory Configuration Failure

The vulnerability of the SMA 100 series SONICWALL network interface controllers is related to access control errors. Exploiting this vulnerability allows a malicious actor to alter the device’s configuration to the factory settings and cause failures in the target system’s services...

Siemens Solid Edge Viewer Code Execution

The vulnerability of the Siemens Solid Edge Viewer application, a tool for design and simulation, is related to the use of memory after it is freed during OBJ file syntax analysis. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created malicio...

TSWbPrxy Component Privilege Escalation

The vulnerability of the TSWbPrxy component in Windows operating systems is related to deficiencies in path validation for restricted access directories. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

VPXD Service DoS

The vulnerability of the VPXD service Virtual Provisioning X Daemon, a management tool for VMware vCenter Server’s virtual infrastructure, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a...

Zhuhai Jieli ATS2815 Bluetooth Classic Input Verification DoS

The vulnerability of the Bluetooth Classic microprogramming device implementations of Zhuhai Jieli ATS2815 and ATS2819 exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures through the created LMP...

Siemens Solid Edge Viewer Code Execution

The vulnerability of the Siemens Solid Edge Viewer application, a tool for design and simulation, is related to the use of memory after it is freed during OBJ file syntax analysis. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created malicio...

VMware Management Privilege Escalation

The vulnerability of the management tool for virtual infrastructure, VMware vCenter Server, and the virtualization platform, VMware Cloud Foundation, is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to increase their privileges...

VMware vSphere Life-cycle Manager File Deletion

The vulnerability of the VMware vSphere Life-cycle Manager, a management tool for virtual infrastructure, related to VMware vCenter Server and VMware Cloud Foundation virtualization platforms, is associated with privilege management errors. Exploiting this vulnerability could allow an attacker to...

Apache Tomcat DoS

The vulnerability of the non-blocking I/O implementation of the Apache Tomcat application server is related to deficiencies in handling exceptional conditions. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

SAP NetWeaver Integration Platform Session Interception

The vulnerability of the MDT software integration platform for SAP NetWeaver is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor, operating remotely, to intercept the session of an administrator or user of the w...

Cisco ASA CLI Command Injection

The vulnerability of the command-line interface CLI of Cisco Adaptive Security Appliance Software ASA and Cisco Firepower Threat Defense FTD lies in the lack of measures to neutralize the special elements used in operating system commands. Exploiting this vulnerability can allow attackers to...

SonicWall Email Security Privilege Management

The vulnerability of SonicWall Email Security and SonicWall Hosted Email Security software-related to insecure privilege management. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Citrix XenMobile Server Path Restriction Unauthorized Access

The vulnerability of the Citrix XenMobile Server, a system for managing corporate mobile devices, is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Adobe Photoshop Buffer Overflow RCE

The vulnerability of the Adobe Photoshop graphic editor is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Advantech BB-ERT351 Web Interface Password Disclosure

The vulnerability of the web interface of the Advantech BB-ERT351 network router lies in the absence of a mechanism for masking passwords when they are displayed in the web interface. Exploiting this vulnerability can allow an attacker to disclose passwords from network services such as PPTP and...

microprogramming software Buffer Overflow

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to writing beyond the buffer memory boundaries. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

Sample apps Component Unauthorized Access

The vulnerability of the Sample apps component of the Oracle WebLogic Server application server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or to modify, add, or...

RemoteFX vGPU Windows Code Execution

The vulnerability of the RemoteFX vGPU component in the Microsoft Hyper-V hardware virtualization system’s operating system Windows exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted...

Google Chrome Data Compromise

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise data integrity through a specially crafted HTML page...

Blink Google Chrome Information Disclosure

The vulnerability of the Blink web browser component in Google Chrome is related to information leakage during interactions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to confidential information through a specially created HTML page...

Google Chrome Use-After-Free

The vulnerability of Google Chrome relates to the use of memory after it is freed in media operations. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions through a specially created HTML page...

Google Chrome Dialog Box Detection Data Compromise

The vulnerability of the dialog area component in Google Chrome’s web browser is related to the lack of a mechanism for controlling permissions. Exploiting this vulnerability allows an attacker to affect data integrity through a specially created HTML page...

Google Chrome Confidential Data Access

The vulnerability of Google Chrome relates to the use of memory after “speech” is performed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

RSA BSAFE Micro Edition

The vulnerabilities of the RSA BSAFE Micro Edition Suite and Oracle Security Service, the Oracle Database Server database management system, the Oracle Communications IP Service Activator network software, and the Enterprise Manager Ops Center virtualization management system are related to the u...

PostgreSQL INSERT ON CONFLICT DoS

The vulnerability of the “INSERT ... ON CONFLICT DO UPDATE” command in the PostgreSQL database management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

IOx Application Environment Privilege Escalation

The vulnerability in the IOx application environment for the Cisco IOS operating system is related to errors during role-based access control checks. Exploiting this vulnerability allows a malicious actor to elevate their privileges to the root level...

Cisco NX-OS DoS

The vulnerability of the Cisco Fabric Services component of the Cisco NX-OS operating system is related to errors in processing TCP packets. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Sound eXchange audio editor Channel Start DoS

The vulnerability of the channelstart function in the remix.c script of the Sound eXchange audio editor is related to a serious overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

Secret Net Studio Antivirus DoS

The vulnerability in the antivirus component of the Secret Net Studio information protection system is related to buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

Elastic Services Controller Authentication Bypass Code Execution

The vulnerability of the Elastic Services Controller’s network management interface is related to errors in checking API requests. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures and execute arbitrary code by sending a specially crafted request to the RE...

Cisco Wireless LAN Controller Configuration DoS

Multiple vulnerabilities exist in the configuration function of the administrative graphical interface of Cisco Wireless LAN Controller microprogramming system. These vulnerabilities arise due to insufficient validation of input data. Exploitation of these vulnerabilities could allow a malicious...

Oracle Identity Analytics Unauthorized Access

The vulnerability of the Core Components of the Oracle Identity Analytics application management application is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to data using the HTTP protocol...

Microsoft JET Database Engine Code Execution

The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Microsoft Exchange Server Memory Object Execution Code

The vulnerability of Microsoft Exchange Server exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the system user by sending a specially crafted email message...

beep free function Information Disclosure

The vulnerability of the free function in the beep utility is related to the occurrence of a “race condition” when signal handlers that send signals SIGINT and SIGTERM to the free function are used. Exploiting this vulnerability can allow an attacker to gain access to confidential information or ...

pdf-image Node.js Arbitrary Command Execution

The vulnerability of the GetInfoCommand function in the PDF conversion software for Node.js lies in the lack of mechanisms to neutralize special elements in the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...

MatrixSSL Buffer Overflow

The vulnerability of the MatrixSSL information encryption software arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a X.509 certificate with a specially crafted “Subject Alt Name”...

Git Arbitrary Command Execution

The vulnerability of the distributed Git version control system is related to the use of insecure Perl scripts for supporting subcommands such as cvsserver. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands on behalf of the git user remotely...

Cisco IOS SNMP Code Injection

Many vulnerabilities in the Simple Network Management Protocol SNMP subsystem of the Cisco IOS operating system are caused by buffer overflows. Exploitation of these vulnerabilities allows a malicious actor to inject code into the system or cause it to restart by sending specially created SNMP...

FFmpeg Memory Limit Recording

The vulnerability of the FFmpeg multimedia library arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to perform write operations beyond the memory boundaries, related to the function ffh264SliceContextInit in libavcodec/h264dec.c...

Qualcomm TrustZone Privilege Escalation

The vulnerability of Qualcomm’s TrustZone microprogramming software’s Android Secure Execution Environment from the CAF repository is related to errors in cryptographic transformations. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

Internet Explorer Information Disclosure

The vulnerability of the Internet Explorer browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information from the process’s memory through a specially crafted web page...

Debian GNU/Linux Remote Compromise Protected Information

The multiple vulnerabilities in the linux-headers-2.6.26-2-all-amd64 package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Remote Compromise Protected Information

The multiple vulnerabilities in the linux-headers-2.6.26-2-all package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Remote Compromise Protected Information

The multiple vulnerabilities in the linux-headers-2.6.26-2-all-alpha package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Data Compromise

Multiple vulnerabilities in the linux-headers-2.6.24-etchnhalf.1-486 operating system of the Debian GNU/Linux distribution; their exploitation may lead to breaches of confidentiality, integrity, and accessibility of protected information...

enterprise automation system service failures

The 1C:Enterprise system contains a vulnerability in the Fast Infoset decoder of the xml2.dll library, which is used for working with XML documents. A malicious individual can manipulate input data, causing the Fast Infoset decoder to become in the EIIINDEXLARG state. This allows them to send an...

Android Privilege Escalation

The vulnerability of the Qualcomm BusPM driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges through a specially created application...

Zhuhai RaySharp Access Information Disclosure

The software of the video surveillance device Zhuhai RaySharp has a default root user password. Exploiting this vulnerability allows a malicious actor to gain access to protected information via the TCP port 23 or 9000...