UEFI RCM Loader Code Execution

The vulnerability of the UEFI RCM software platform for industrial-class artificial intelligence systems, such as NVIDIA IGX Orin and Jetson AGX Orin, is related to the incorrect implementation of security functions for the user interface. Exploiting this vulnerability can allow attackers to...

Dell PowerProtect Data Manager Unauthorized Access

The vulnerability of the software for centralized backup and disaster recovery management in Dell PowerProtect Data Manager is related to improper code generation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

SIMATIC PCS neo Session Bypass

The vulnerability of the SIMATIC PCS neo web-based system for managing technological processes, as well as the vulnerabilities of the TIA Administrator software for development environments and the Totally Integrated Automation Portal Portal TIA software for automating technological processes, ar...

Totolink Router Code Execution

The vulnerability of the NTPSyncWithHost function in Totolink router microprogramming software is related to the failure to take measures to neutralize special elements of the hostTime parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

MS-EVEN Protocol Code Execution

The vulnerability of the MS-EVEN protocol EventLog Remoting Protocol for Windows operating systems is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

E-Staff automation system Data Filtering Unauthorized Access

The vulnerability of the E-Staff recruitment process automation system is related to errors in data filtering when obtaining information about the target. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ChromeOS Kernel Code Execution

The vulnerability of the ChromeOS operating system’s kernel exists due to insufficient validation of input data. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

Cisco IOS XR File Permissions

The vulnerability of Cisco IOS XR operating systems lies in the lack of control over public write permissions for installed application files. Exploiting this vulnerability can allow a perpetrator to circumvent existing security restrictions...

Linux Bluetooth DoS

The vulnerability of the Linux operating system’s Bluetooth kernel component is related to improper locking of resources. Exploiting this vulnerability can allow a hacker to cause a service failure...

Ivanti Connect Secure Buffer Overflow

The vulnerability of Ivanti Connect Secure, Ivanti Policy Secure, and ZTA Gateways lies in buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

D-Link DI-8100 Code Execution

The vulnerability of the ipsecnetasp function in the D-Link DI-8100 network device’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially...

Virtuoso-OpenSource sqlg_hash_source DoS

The vulnerability of the sqlghashsource component in the Virtuoso-opensource web application development platform is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending...

Adobe Acrobat Memory Use Code Execution

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2024, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow...

Slider Revolution Plugin Unrestricted File Upload

The vulnerability of the Slider Revolution plugin for WordPress content management systems is related to the ability to download files of a dangerous type without limitation. Exploiting this vulnerability could allow an attacker to write arbitrary files...

qcom_mhi_qrtr_send Heap Buffer Overflow DoS

The vulnerability of the qcommhiqtrSend function in the net/qrtr/mhi.c module, which is part of the Qualcomm IPC kernel for the Linux operating system, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux tools/power/x86/turbostat/turbostat.c Heap Buffer Overflow

The vulnerability of the idxtooffset function in the tools/power/x86/turbostat/turbostat.c module of the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

GitLab CI Lint API SSRF

The vulnerability of the CI Lint API component of the software platform based on Git for collaborative code development on GitLab is related to insufficient testing of server-side requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

Linux xiic_xfer() Heap Buffer Overflow Info Disclosure

The vulnerability of the xiicxfer function in the drivers/i2c/busses/i2c-xiic.c file of the Linux operating system’s kernel is related to security configuration errors. Exploiting this vulnerability could allow an attacker to gain access to protected information...

AMD DRI Buffer Overflow DoS

Vulnerability of the CalculateBytePerPixelAndBlockSizes function in the drivers/gpu/drm/amd/display/dc/dml2/dml21/src/dml2core/dml2coredcn4calcs.c file – The driver that supports Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems has a vulnerability due to...

Cobalt Ashlar-Vellum Memory Use After Free

The vulnerability of Cobalt Ashlar-Vellum’s parametric automated design and 3D modeling software lies in its ability to exploit memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the current process...

OpenImageIO Code Execution

The vulnerability in the src/include/OpenImageIO/detail/farmhash.h file of the image processing library OpenImageIO is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Tenda W18E Router Bypass Security Restrictions

The vulnerability of the setQuickCfgWifiAndLogin function in the Tenda W18E router’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions and gain access to read, modify, or delete data ...

CoreMedia DoS

The vulnerability of the CoreMedia component in operating systems such as MacOs, iPadOS, VisionOS, iOS, WatchOS, and tvOS is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

D-Link DIR-816A Router websURLFilterAddDel Code Execution

The vulnerability of the websURLFilterAddDel component of the D-Link DIR-816A2 router’s microprogramming software is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially created HTTP POST request...

Tenda AC18 formSetFirewallCfg DoS

The vulnerability of the formSetFirewallCfg function in the Tenda AC18 router microprogramming system is related to buffer overflow during the processing of the firewallEn parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Windows Win32 Kernel Privilege Escalation

The vulnerability of the Windows Win32 Kernel subsystem in operating systems involves the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Kerberos Protocol DoS

The vulnerability of the Kerberos protocol for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Resilient File System Deduplication Service Privilege Escalation

The vulnerability of the Resilient File System ReFS Deduplication Service in Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7-Zip Parse Arbitrary File Access

The vulnerability of the CFileNameAttr::Parse function in the NtfsHandler.cpp file of the 7-Zip archive processor is related to the occurrence of operations outside the buffer in memory, due to incorrect processing of two-byte elements in the NTFS file system. Exploiting this vulnerability allows...

Social Group Flex unauthorized Access

The vulnerability of the socialgroupflexiblegroup configuration in the Drupal Open Social CMS system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

DHCP Server Data Compromise

The vulnerability of DHCP servers for real-time operating systems from Wind River VxWorks relates to operations that go beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

OTP Library Man-in-the-Middle

The vulnerability of theOTP library in the Erlang programming language is related to errors in the authentication process for certificates. Exploiting this vulnerability allows attackers who operate remotely to carry out “man-in-the-middle” type attacks...

Websoft HCM Automation Software Path Traversal

The vulnerability of Websoft HCM’s automation software for HR processes arises from improper handling of paths during the loading of specially crafted files. Exploiting this vulnerability allows an attacker to perform arbitrary file operations outside the directory...

HPE CX 10000 Firewall Disclosure

The vulnerability of the switch network firewalls for HPE CX 10000 corporate networks is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

SonicOS SSL VPN Unauthorized Access

The vulnerability of the SSL VPN remote access technology implemented on SonicOS systems is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

JetBrains TeamCity Disclosure

The vulnerability of the Continuous Integration and Deployment application delivery system CI/CD of TeamCity in JetBrains is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

Substance 3D Painter Buffer Overflow

The vulnerability of the Substance 3D Painter software for creating textures and materials for 3D models involves reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

DrayTek Vigor Router DoS

The vulnerability in the SSLapp.cgi web interface of the DrayTek Vigor router software lies in the buffer overflow that occurs during the processing of the sAppName parameter. Exploiting this vulnerability allows an attacker to trigger a Denial-of-Service Attack DoS from a remote location...

Adobe Document Service SSRF

The vulnerability of the Adobe Document Service component in the SAP NetWeaver AS for Java web application development and deployment framework is related to insufficient validation of incoming requests. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack using a...

Drupal Kernel File Deletion

The vulnerability of the Drupal CMS system’s kernel is related to insufficient control over the modification of dynamically defined object properties. Exploiting this vulnerability could allow a malicious actor to delete any file at will...

JetBrains YouTrack Prototype Contamination

The vulnerability of the data merging functions in the JetBrains YouTrack project and task management software is related to the uncontrolled modification of prototype object attributes. Exploiting this vulnerability could allow a malicious actor to execute an “infection of the prototype” attack...

Intel Server Debug and Provisioning Tool Privilege Escalation

The vulnerability of the Intel Server Debug and Provisioning Tool Intel SDP for operating systems running on Windows relates to an uncontrolled element in the search process. Exploiting this vulnerability could allow a malicious individual to gain increased privileges...

Linux scmidebugfs_common_setup Heap Buffer Overflow DoS

The vulnerability of the scmi.debugfscommonsetup function in the drivers/firmware/armscmi/driver.c file of the Linux kernel is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

SINEC Traffic Analyzer Access Control

The vulnerability of the SINEC Traffic Analyzer software for monitoring and analyzing network traffic in industrial networks is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

BDF File Handler Code Execution

The vulnerability of the BDF File Handler component in the software platform for numerical modeling and analysis of Simcenter Nastran products is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Linux debugfs_remove_recursive Heap Buffer Overflow DoS

The vulnerability of the debugfsremoverecursive function in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

Samsung Exynos Code Execution

The vulnerability of microprogramming software for Samsung Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, and Exynos W920 relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

YouGile Project Management File Upload Code Execution

The vulnerability of the YouGile project management service lies in the lack of restrictions on file downloads. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

ABB AC 800M Arbitrary Command Execution

The vulnerability of the ABB AC 800M controller’s microprogramming software is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafted MMS packets remotely...

BitLocker Security Restriction

The vulnerability of the BitLocker data protection function in Microsoft Windows operating systems is related to a breach of the data protection mechanism. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...