95883 matches found
The vulnerability of the `generateCookieHash` function in the Symfony/security component of the Symfony software development and web application management platform allows attackers to bypass authentication procedures.
The vulnerability of the generateCookieHash function in the Symfony software platform for web application development and management is related to an error during authentication. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process...
The vulnerability of the libzypp library in software developed for the SUSE CaaS Platform and SUSE Linux Enterprise Server allows a perpetrator to gain unauthorized access to information.
The vulnerability of the libzypp library in SUSE CaaS Platform and SUSE Linux Enterprise Server software is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information...
The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of Remote Desktop Services RDS for Windows operating systems arises due to errors in checking RDS service requests during RDP protocol connections. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted requests to the RDS...
The vulnerability of the Jenkins Script Security plugin, related to incorrect type conversion, allows attackers to execute arbitrary code or gain unauthorized access to confidential information.
The vulnerability of Jenkins Script Security plugin is related to incorrect type conversion. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code or gain unauthorized access to confidential information...
Vulnerability of the software complex: Regional electronic budget. The integration platform, which is related to the shortcomings of the mechanism for limiting the number of authentication attempts, allows a violator to select a user password.
Vulnerability of the software complex: Regional electronic budget. The integration platform is connected to the shortcomings of the mechanism for limiting the number of authentication attempts. Exploiting this vulnerability can allow a malicious actor to select a user password remotely...
The vulnerability of the Windows GDI component in Windows operating systems allows attackers to gain unauthorized access to protected information.
The vulnerability of the Windows GDI component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the information protection system against unauthorized access is caused by an operation that goes beyond the buffer boundaries in memory, allowing a intruder to trigger a service failure.
The vulnerability of the information protection system against unauthorized access is due to an operation going beyond the buffer in memory file handling is not performed; the full path length exceeds 260 characters. Exploiting this vulnerability can allow a local attacker to cause a service...
The vulnerability of Microsoft SharePoint Foundation and the Microsoft SharePoint Server software suite relates to deficiencies in access control. This allows attackers to carry out cross-site scripting attacks and increase their privileges.
The vulnerability of Microsoft SharePoint Foundation and the Microsoft SharePoint Server software suite is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks and increase their privileges by using a specially...
The vulnerability of the strncpy function in Atftpd arises from the possibility of the operation exceeding the buffer’s memory limit. This allows attackers to compromise data integrity and confidentiality, or cause service failures.
The vulnerability of the strncpy function in the Atftpd package is related to the sending of a 3-byte error message by the package. Exploiting this vulnerability allows an attacker to compromise data integrity and confidentiality, or cause service failures...
The vulnerability of the HTTP/2 server implementation in nginx allows a attacker to trigger a service failure.
The vulnerability of the HTTP/2 server implementation based on nginx is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.
The vulnerability of the Server: Optimizer component of the Oracle MySQL database management system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the Core Components of the identity management application for Oracle Identity Analytics allows a perpetrator to gain unauthorized access to data.
The vulnerability of the Core Components of the Oracle Identity Analytics application management application is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to data using the HTTP protocol...
The vulnerability of the TeNIX operating system for programmable logic controllers MFC1500 and MFC3000 allows a hacker to gain full access to the system.
The vulnerability of the TeNIX operating system for programmable logic controllers MFC1500 and MFC3000 is related to the use of a default weak password for the root account, information about which is not available in the documentation. Exploiting this vulnerability could allow an attacker,...
The vulnerability of Microsoft SQL Server Management Studio, related to errors in restricting XML references to external objects (XXE), allows attackers to disclose sensitive information.
The vulnerability of Microsoft SQL Server Management Studio is related to errors in restricting XML references to external objects XXE. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information using a specially crafted file...
The vulnerability of the Wizard component in the microprogramming software of the RICOH MP C6003 multifunctional device allows a perpetrator to compromise the confidentiality and integrity of the protected information.
The vulnerability of the Wizard /web/entry/en/address/adrsSetUserWizard.cgi component of the RICOH MP multifunctional device exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to compromise the...
The vulnerability of the Nikto web application security scanner lies in the lack of mechanisms to neutralize special elements in the input commands of the operating system. This allows attackers to execute arbitrary commands on the operating system.
The vulnerability of the Nikto web scanner is related to the lack of neutralization of special elements in the input data of the operating system during the generation of CSV files containing the results of scanning. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the software for interacting with servers via cURL arises from buffer overflows in memory, allowing an attacker to execute arbitrary code or cause a service failure.
The vulnerability of the software for interacting with servers via cURL arises due to the overflow of dynamic memory in the buffer when a FTP connection is closed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using long server...
The vulnerability of the “/com.sapportals.navigation.testComponent.NavigationRequestSniffer” component of the SAP NetWeaver software integration platform allows a hacker to inject any HTML tags into a page.
The vulnerability of the “/com.sapportals.navigation.testComponent.NavigationRequestSniffer” component of the SAP NetWeaver software integration platform exists due to the lack of measures taken to protect the structure of web pages. This vulnerability allows a malicious actor to inject arbitrary...
Vulnerability in the MPEG-2 decoder of the Android operating system, allowing a hacker to execute arbitrary code
The vulnerability in the MPEG-2 decoder of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure
The vulnerability of the ReadMNGImage function in the ImageMagick console graphic editor’s png.c file arises from the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure loss o...
The vulnerability of the iOS operating system, which allows a hacker to trigger a service failure
The vulnerability of the Wi-Fi component of the iOS operating system arises due to buffer overflow. Exploiting this vulnerability can allow a local attacker to cause a service failure through the compromised access point...
The vulnerability of the Internet Explorer browser allows a perpetrator to obtain confidential information from the process’s memory, cause a service failure, or have other effects on the system.
The vulnerability of the Internet Explorer browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information from the process memory, cause service failures, or otherwise affect the syst...
The vulnerability of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Graphical Device Interface GDI in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating locally, to enhance their privileges through a specially created application...
The vulnerability of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Graphical Device Interface GDI in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating locally, to enhance their privileges through a specially created application...
The vulnerability of the McAfee VirusScan Enterprise anti-virus software allows a hacker to execute arbitrary code.
The vulnerability of the McAfee VirusScan Enterprise antivirus software is related to improper verification of the cryptographic signature. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code using a specially created file...
The developer’s code set vulnerability in Cavium’s SDK, allowing attackers to obtain encrypted RSA keys.
The vulnerability of the RSA-CRT implementation in the developer’s toolkit for devices based on Cavium processors is related to the lack of protection for sensitive data. Exploiting this vulnerability allows a malicious actor to obtain encrypted RSA keys by launching attacks through external...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the kernel-image-2.6.8-2-sparc64 operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the kernel-image-2.6.8-3-32-smp operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the Java Platform software platform allows a remote attacker to compromise the confidentiality of protected information.
The vulnerability of the Java SE and Java SE Embedded software platform allows a remote attacker to compromise data confidentiality by using the JAXP subcomponent...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the linux-headers-2.6.26-1-5kc-malta package of the Debian GNU/Linux operating system may be exploited, resulting in a breach of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerability of the Java Runtime Environment software platform, which allows a malicious attacker to compromise data confidentiality and integrity
Vulnerability of the Java Runtime Environment, related to program components. Exploiting this vulnerability allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of data by using the 2D component...
The vulnerability of the information protection system against unauthorized access—Dallas Lock—allows a intruder to gain unauthorized access to information by circumventing the access control rules.
The vulnerability in the “Dallas Lock 8.0” information protection system driver lies in its lack of implementation of access control for attributes of file system objects. An attacker can access a file system object that is restricted according to access control rules, by using a special attribut...
The vulnerability of the Android operating system, which allows a hacker to increase their privileges
The vulnerability of the Qualcomm BusPM driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges through a specially created application...
The vulnerability of the Zhuhai RaySharp video surveillance software allows a intruder to gain access to protected information.
The software of the video surveillance device Zhuhai RaySharp has a default root user password. Exploiting this vulnerability allows a malicious actor to gain access to protected information via the TCP port 23 or 9000...
The vulnerability of the Internet Information Services software allows a perpetrator to cause service failures.
The Internet Information Services software package contains a vulnerability in the ftpsvc2.dll module, located in the C:\Windows\system32\inetsrv directory. Using this module causes exhaustion of the stack when processing a special command argument “LIST”. This occurs due to a recursive function...
The vulnerability of the Cisco IOS operating system, which allows a perpetrator to gain unauthorized access to the device
The vulnerability of the SSHv2 component in Cisco IOS systems is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to a device by manipulating information about known user names and their associated RSA keys...
The vulnerability of the Firefox OS operating system allows a hacker to bypass the password input mechanism and gain access to storage devices.
The vulnerability of the Firefox OS operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass password input mechanisms and gain access to storage devices by using the device mounting interface...
Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to execute arbitrary code or cause system failures
The vulnerability of the ImageIO component in iOS and Mac OS X operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted TIFF image...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The kernel-image-2.2.19-generic package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the cups-php-1.4.2 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited...
Vulnerabilities of the Red Hat Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the cross-ppc64 operating system of the Red Hat Linux package can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...
The vulnerability of the CentOS operating system allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the libxslt-1.1.11 package on the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the tog-pegasus-devel-2.7.0 package for the Red Hat Enterprise Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the libqt3 package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the libgda2-ruby package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The hostap-modules-2.4.27-4-k7 package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the gpg2 package of the OpenSUSE operating system can lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
Multiple vulnerabilities exist in the file-64bit operating system package of openSUSE. Exploitation of these vulnerabilities can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the OpenSUSE operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the freetype2 package in the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
The vulnerability of the CodeScoring software development platform lies in its inability to eliminate special elements from the template creation mechanism, allowing attackers to execute arbitrary code.
The vulnerability of the CodeScoring software development platform lies in the lack of measures to neutralize special elements within the template creation mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...