98239 matches found
Mozilla Firefox Code Execution
The vulnerability of Mozilla Firefox and Firefox ESR browsers is related to writing beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
HPE StoreOnce VSA getServerCertificate Code Execution
The vulnerability of the getServerCertificate method in the HPE StoreOnce VSA storage virtualized environment is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Linux hci_cmd_sync_queue() LE Terminate DoS
The vulnerabilities of the hcicmdsyncqueue, hcileterminatebig, or hcilebigterminate functions in the Linux operating system are related to memory leaks. Exploiting these vulnerabilities can allow an attacker to cause a service failure...
CreateLog Method Code Execution
The vulnerability of the CreateLog method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to bypass security...
Ffmpeg Buffer Overflow Info Disclosure
The vulnerability of the FFmpeg multimedia library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Intel Arc A-series Graphics DoS
The vulnerability of microprogrammed software for Intel Arc A-series graphics processors and Intel Arc Pro A-series graphics processors is related to insufficient testing of exception states. Exploiting this vulnerability can allow attackers to cause system failures...
UEFI RCM Loader Code Execution
The vulnerability of the UEFI RCM software platform for industrial-class artificial intelligence systems, such as NVIDIA IGX Orin and Jetson AGX Orin, is related to the incorrect implementation of security functions for the user interface. Exploiting this vulnerability can allow attackers to...
Dell PowerProtect Data Manager Unauthorized Access
The vulnerability of the software for centralized backup and disaster recovery management in Dell PowerProtect Data Manager is related to improper code generation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
SIMATIC PCS neo Session Bypass
The vulnerability of the SIMATIC PCS neo web-based system for managing technological processes, as well as the vulnerabilities of the TIA Administrator software for development environments and the Totally Integrated Automation Portal Portal TIA software for automating technological processes, ar...
Totolink Router Code Execution
The vulnerability of the NTPSyncWithHost function in Totolink router microprogramming software is related to the failure to take measures to neutralize special elements of the hostTime parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
E-Staff automation system Data Filtering Unauthorized Access
The vulnerability of the E-Staff recruitment process automation system is related to errors in data filtering when obtaining information about the target. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ChromeOS Kernel Code Execution
The vulnerability of the ChromeOS operating system’s kernel exists due to insufficient validation of input data. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...
Cisco IOS XR File Permissions
The vulnerability of Cisco IOS XR operating systems lies in the lack of control over public write permissions for installed application files. Exploiting this vulnerability can allow a perpetrator to circumvent existing security restrictions...
Linux Bluetooth DoS
The vulnerability of the Linux operating system’s Bluetooth kernel component is related to improper locking of resources. Exploiting this vulnerability can allow a hacker to cause a service failure...
Ivanti Connect Secure Buffer Overflow
The vulnerability of Ivanti Connect Secure, Ivanti Policy Secure, and ZTA Gateways lies in buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
D-Link DI-8100 Code Execution
The vulnerability of the ipsecnetasp function in the D-Link DI-8100 network device’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially...
Virtuoso-OpenSource sqlg_hash_source DoS
The vulnerability of the sqlghashsource component in the Virtuoso-opensource web application development platform is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending...
Adobe Acrobat Memory Use Code Execution
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2024, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow...
Slider Revolution Plugin Unrestricted File Upload
The vulnerability of the Slider Revolution plugin for WordPress content management systems is related to the ability to download files of a dangerous type without limitation. Exploiting this vulnerability could allow an attacker to write arbitrary files...
qcom_mhi_qrtr_send Heap Buffer Overflow DoS
The vulnerability of the qcommhiqtrSend function in the net/qrtr/mhi.c module, which is part of the Qualcomm IPC kernel for the Linux operating system, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Linux tools/power/x86/turbostat/turbostat.c Heap Buffer Overflow
The vulnerability of the idxtooffset function in the tools/power/x86/turbostat/turbostat.c module of the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
GitLab CI Lint API SSRF
The vulnerability of the CI Lint API component of the software platform based on Git for collaborative code development on GitLab is related to insufficient testing of server-side requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...
Linux kernel adv7511_probe Heap Buffer Overflow DoS
The vulnerability of the adv7511probe function in the drivers/gpu/drm/bridge/adv7511/adv7511drv.c kernel module of the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
AMD DRI Buffer Overflow DoS
Vulnerability of the CalculateBytePerPixelAndBlockSizes function in the drivers/gpu/drm/amd/display/dc/dml2/dml21/src/dml2core/dml2coredcn4calcs.c file – The driver that supports Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems has a vulnerability due to...
Tenda W18E Router Bypass Security Restrictions
The vulnerability of the setQuickCfgWifiAndLogin function in the Tenda W18E router’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions and gain access to read, modify, or delete data ...
CoreMedia DoS
The vulnerability of the CoreMedia component in operating systems such as MacOs, iPadOS, VisionOS, iOS, WatchOS, and tvOS is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
D-Link DIR-816A Router websURLFilterAddDel Code Execution
The vulnerability of the websURLFilterAddDel component of the D-Link DIR-816A2 router’s microprogramming software is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially created HTTP POST request...
Windows Win32 Kernel Privilege Escalation
The vulnerability of the Windows Win32 Kernel subsystem in operating systems involves the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows DHCP Client Code Execution
The vulnerability of DHCP clients of Windows operating systems relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Tenda AC18 formSetFirewallCfg DoS
The vulnerability of the formSetFirewallCfg function in the Tenda AC18 router microprogramming system is related to buffer overflow during the processing of the firewallEn parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Resilient File System Deduplication Service Privilege Escalation
The vulnerability of the Resilient File System ReFS Deduplication Service in Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Kerberos Protocol DoS
The vulnerability of the Kerberos protocol for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
7-Zip Parse Arbitrary File Access
The vulnerability of the CFileNameAttr::Parse function in the NtfsHandler.cpp file of the 7-Zip archive processor is related to the occurrence of operations outside the buffer in memory, due to incorrect processing of two-byte elements in the NTFS file system. Exploiting this vulnerability allows...
Social Group Flex unauthorized Access
The vulnerability of the socialgroupflexiblegroup configuration in the Drupal Open Social CMS system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
DHCP Server Data Compromise
The vulnerability of DHCP servers for real-time operating systems from Wind River VxWorks relates to operations that go beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...
OTP Library Man-in-the-Middle
The vulnerability of theOTP library in the Erlang programming language is related to errors in the authentication process for certificates. Exploiting this vulnerability allows attackers who operate remotely to carry out “man-in-the-middle” type attacks...
Websoft HCM Automation Software Path Traversal
The vulnerability of Websoft HCM’s automation software for HR processes arises from improper handling of paths during the loading of specially crafted files. Exploiting this vulnerability allows an attacker to perform arbitrary file operations outside the directory...
HPE CX 10000 Firewall Disclosure
The vulnerability of the switch network firewalls for HPE CX 10000 corporate networks is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...
SonicOS SSL VPN Unauthorized Access
The vulnerability of the SSL VPN remote access technology implemented on SonicOS systems is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
JetBrains TeamCity Disclosure
The vulnerability of the Continuous Integration and Deployment application delivery system CI/CD of TeamCity in JetBrains is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
Substance 3D Painter Buffer Overflow
The vulnerability of the Substance 3D Painter software for creating textures and materials for 3D models involves reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Teamcenter Visualization Buffer Overflow Code Execution
The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment relates to the execution of operations beyond the buffer in memory when processing WRL files. Exploiting this vulnerability could allow an attacker to...
Teamcenter Visualization Buffer Overflow Code Execution
The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment relates to the execution of operations beyond the buffer in memory when processing WRL files. Exploiting this vulnerability can allow an attacker to execu...
DrayTek Vigor Router DoS
The vulnerability in the SSLapp.cgi web interface of the DrayTek Vigor router software lies in the buffer overflow that occurs during the processing of the sAppName parameter. Exploiting this vulnerability allows an attacker to trigger a Denial-of-Service Attack DoS from a remote location...
Adobe Document Service SSRF
The vulnerability of the Adobe Document Service component in the SAP NetWeaver AS for Java web application development and deployment framework is related to insufficient validation of incoming requests. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack using a...
Drupal Kernel File Deletion
The vulnerability of the Drupal CMS system’s kernel is related to insufficient control over the modification of dynamically defined object properties. Exploiting this vulnerability could allow a malicious actor to delete any file at will...
JetBrains YouTrack Prototype Contamination
The vulnerability of the data merging functions in the JetBrains YouTrack project and task management software is related to the uncontrolled modification of prototype object attributes. Exploiting this vulnerability could allow a malicious actor to execute an “infection of the prototype” attack...
Intel Server Debug and Provisioning Tool Privilege Escalation
The vulnerability of the Intel Server Debug and Provisioning Tool Intel SDP for operating systems running on Windows relates to an uncontrolled element in the search process. Exploiting this vulnerability could allow a malicious individual to gain increased privileges...
AnyDesk Allow Direct Connections Disclosure
The vulnerability of the “Allow Direct Connections” function in the remote access and management software AnyDesk is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information about the target system’s IP...
Linux scmidebugfs_common_setup Heap Buffer Overflow DoS
The vulnerability of the scmi.debugfscommonsetup function in the drivers/firmware/armscmi/driver.c file of the Linux kernel is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...