98239 matches found
Secret Net Studio Antivirus DoS
The vulnerability in the antivirus component of the Secret Net Studio information protection system is related to buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
Elastic Services Controller Authentication Bypass Code Execution
The vulnerability of the Elastic Services Controller’s network management interface is related to errors in checking API requests. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures and execute arbitrary code by sending a specially crafted request to the RE...
Cisco Wireless LAN Controller Configuration DoS
Multiple vulnerabilities exist in the configuration function of the administrative graphical interface of Cisco Wireless LAN Controller microprogramming system. These vulnerabilities arise due to insufficient validation of input data. Exploitation of these vulnerabilities could allow a malicious...
Oracle Identity Analytics Unauthorized Access
The vulnerability of the Core Components of the Oracle Identity Analytics application management application is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to data using the HTTP protocol...
Cisco IP Phone Web Interface Arbitrary Code Injection Disclosure
The vulnerability of the web interface of Cisco IP Phone 8800 Series software lies in errors in the validation of data provided by users. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the web page that is loaded, or to disclose protected information...
Microsoft JET Database Engine Code Execution
The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
Microsoft Exchange Server Memory Object Execution Code
The vulnerability of Microsoft Exchange Server exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the system user by sending a specially crafted email message...
beep free function Information Disclosure
The vulnerability of the free function in the beep utility is related to the occurrence of a “race condition” when signal handlers that send signals SIGINT and SIGTERM to the free function are used. Exploiting this vulnerability can allow an attacker to gain access to confidential information or ...
pdf-image Node.js Arbitrary Command Execution
The vulnerability of the GetInfoCommand function in the PDF conversion software for Node.js lies in the lack of mechanisms to neutralize special elements in the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...
NVIDIA Graphics Drivers Root Code Execution
The vulnerability of the NVIDIA Graphics Drivers component for the Mac OS X operating system is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability allows an attacker to execute arbitrary code with kernel privileges through a specially...
MatrixSSL Buffer Overflow
The vulnerability of the MatrixSSL information encryption software arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a X.509 certificate with a specially crafted “Subject Alt Name”...
Git Arbitrary Command Execution
The vulnerability of the distributed Git version control system is related to the use of insecure Perl scripts for supporting subcommands such as cvsserver. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands on behalf of the git user remotely...
Cisco IOS SNMP Code Injection
Many vulnerabilities in the Simple Network Management Protocol SNMP subsystem of the Cisco IOS operating system are caused by buffer overflows. Exploitation of these vulnerabilities allows a malicious actor to inject code into the system or cause it to restart by sending specially created SNMP...
FFmpeg Memory Limit Recording
The vulnerability of the FFmpeg multimedia library arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to perform write operations beyond the memory boundaries, related to the function ffh264SliceContextInit in libavcodec/h264dec.c...
Qualcomm TrustZone Privilege Escalation
The vulnerability of Qualcomm’s TrustZone microprogramming software’s Android Secure Execution Environment from the CAF repository is related to errors in cryptographic transformations. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...
Internet Explorer Information Disclosure
The vulnerability of the Internet Explorer browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information from the process’s memory through a specially crafted web page...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the linux-headers-2.6.26-2-all-amd64 package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the linux-headers-2.6.26-2-all package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the linux-headers-2.6.26-2-all-alpha package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
enterprise automation system service failures
The 1C:Enterprise system contains a vulnerability in the Fast Infoset decoder of the xml2.dll library, which is used for working with XML documents. A malicious individual can manipulate input data, causing the Fast Infoset decoder to become in the EIIINDEXLARG state. This allows them to send an...
Android Privilege Escalation
The vulnerability of the Qualcomm BusPM driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges through a specially created application...
Silverlight Code Execution
The vulnerability of the Silverlight software platform is related to errors in reverse displacement processing during the decoding process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures through a specially crafted web page...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities of the hostap-modules-2.4.27-4-k7-smp package for the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...
OpenSUSE Data Compromise
The vulnerability of the qt3-devel-doc package in the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
OpenSUSE Data Compromise
The vulnerability of the libgsf package in the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
OpenSUSE Data Compromise
The vulnerability of the mono-core-x86 operating system package from openSUSE can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited remotely...
Red Hat Enterprise Linux Data Compromise
The vulnerability of the xcb-util-keysyms-0.3.9 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
Red Hat Enterprise Linux Remote Compromise
The kernel-doc-2.4.21 package of the Red Hat Enterprise Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the confidentiality of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the kernel-headers-2.2.19-ide Debian GNU/Linux operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the libqt3c102-mt-ibase package of the Debian GNU/Linux operating system may lead to violations of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
OpenSUSE Data Compromise
The vulnerability of the krb5-appl-clients package of the OpenSUSE operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
Red Hat Enterprise Linux Remote Compromise
The multiple vulnerabilities in the fuse-libs-2.8.3 package of the Red Hat Enterprise Linux operating system can lead to a breach of the integrity and accessibility of protected information. These vulnerabilities can be exploited remotely...
Red Hat Linux Data Compromise
Multiple vulnerabilities exist in the kernel-2.4.18 of the Red Hat Linux operating system. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...
DesktopServicesHelper Privilege Escalation
The vulnerability of DesktopServicesHelper in macOS operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Webasyst Shop-Script CMS Insufficient Testing
The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in insufficient testing of server-side requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...
QAFA Firmware Authentication Bypass
The vulnerability of the QAFA Firmware for telecommunications equipment relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the administrative web console...
Web Media Extensions Buffer Overflow
The vulnerability of Web Media Extensions, a type of multimedia extension, is related to overflowing buffers in dynamic memory. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...
golang-x-image Resource Exhaustion DoS
The vulnerability of the golang-x-image package, a programming language, is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...
Linux SPI Driver Heap Buffer Overflow DoS
The vulnerability of the pchspipdremove function in the drivers/spi/spi-topcliff-pch.c driver for Linux SPI devices relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility ...
SMC Protocol Heap Buffer Overflow DoS
The vulnerability of the smcrservconffirstlink function in the net/smc/afsmc.c module, part of the SMC protocol family in the Linux operating system’s kernel, is related to improper release of resources. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity...
Extensions API Confidential Data Access
The vulnerability of the Extensions API in Google Chrome and Microsoft Edge browsers is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to gain access to confidential data...
amdgpu_amdkfd_submit_ib() Function Use-After-Free
The vulnerability of the amdgpuamdkfdsubmitib function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfd.c driver for AMD GPU cores in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
Dahua Loopback Authentication Privilege Escalation
The vulnerability of the Loopback microprogramming system authentication mechanism of Dahua devices is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers, operating remotely, to enhance their privileges...
Data Hub Adapter Authentication Client Code Execution
The vulnerability of the standard authentication client for Data Hub Adapters in the SAP Commerce Cloud platform is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, leading to a complete compromise of the system...
Microsoft SharePoint Server Privilege Escalation
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in the absence of authentication for a critical function. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
Simcenter Femap Buffer Overflow
The vulnerability of the pre-processing processor Simcenter Femap is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Suricata DoS
The vulnerability of the NFS intrusion detection and prevention system Suricata depends on the unlimited distribution of resources. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
Payments Component Manipulate URL Bar
The vulnerability of the Payments component in Google Chrome and Microsoft Edge is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to forge the URL input by using a specially created HTML page...
SolarWinds Serv-U Resource Consumption DoS
The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to trigger a service failure by sending a specially crafted POST request...
Google Chrome Microsoft Edge Unauthorized Access
The vulnerability of Google Chrome and Microsoft Edge web browsers relates to the use of uninitialized variables. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...