92710 matches found
The vulnerability of the ruby-find-library-file function in the EMACS text editor arises from improper elimination of special elements used in the command, allowing an attacker to execute arbitrary code.
The vulnerability of the ruby-find-library-file function in the EMACS text editor is related to improper elimination of special elements. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in a buffer overflow in dynamic memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted file...
The vulnerability of the RubyGems.org repository, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of the RubyGems.org repository for programming languages involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of Adobe Experience Manager’s content and media data management system, related to the lack of measures taken to protect the website structure, allows attackers to carry out cross-site scripting attacks.
The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to carry out cross-site scripting attacks...
The vulnerability of the Connect method of the SolarWinds Access Rights Manager software allows a perpetrator to execute arbitrary code.
The vulnerability of the Connect method in the SolarWinds Access Rights Manager software lies in improper restrictions on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow lies in improper code generation, allowing attackers to execute arbitrary code.
The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by introducing specially crafted .md files...
The vulnerability of the Mozilla Firefox browser for Android, related to deficiencies in access control, allows attackers to bypass security restrictions and compromise the integrity of protected information.
The vulnerability of the Mozilla Firefox browser for Android is related to deficiencies in access control, resulting from incorrect processing of the Principal object when opening new tabs. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and compromise the...
The vulnerability of the file /view/systemConfig/reboot/reboot_commit.php in the Ruijie RG-UAC router microprogramming system allows a attacker to execute arbitrary commands.
The vulnerability of the file /view/systemConfig/reboot/rebootcommit.php in the Ruijie RG-UAC router microprogramming system exists due to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to...
The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses stems from deficiencies in the authentication process, which allows attackers to escalate their privileges.
The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to deficiencies in the authentication process. Exploiting this vulnerability could allow attackers to increase their privileges remotely...
The vulnerability of the LenelS2 NetBox access control and event monitoring system, related to the implementation or modification of arguments, allows a intruder to execute arbitrary commands.
The vulnerability of the LenelS2 NetBox access control and event monitoring system is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of the Media Session application interface for Google Chrome and Microsoft Edge browsers allows a perpetrator to execute arbitrary code.
The vulnerability of the Media Session application interface in Google Chrome and Microsoft Edge browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by loading a specially created malicious HTML page...
The vulnerability of the CMS system Netcat, related to the unlimited loading of dangerous types of files, allows attackers to execute arbitrary code.
The vulnerability of the CMS system Netcat is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the getAudioMetadata method of the com.webos.service.attachedstoragemanager service in the LG WebOS operating system allows a hacker to execute arbitrary commands.
The vulnerability of the getAudioMetadata method in the com.webos.service.attachedstoragemanager service of the LG WebOS operating system exists because measures to neutralize the special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows a...
The vulnerability of Google Chrome’s user interface allows a perpetrator to replace the user interface.
The vulnerability of Google Chrome’s user interface is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially created HTML page...
The vulnerability in the web interface for controlling the Flowmon operating system of network monitoring devices allows a perpetrator to execute arbitrary commands.
The vulnerability of the web interface for controlling the Flowmon operating system in devices for network monitoring exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to execute...
The vulnerability of the formSetClientState function (/goform/SetClientState) in the Tenda AC10U router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the formSetClientState function /goform/SetClientState in the Tenda AC10U router’s microprogramming software lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...
The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems for QNAP network devices stems from the lack of measures to neutralize special elements, allowing attackers to execute arbitrary commands.
The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems for QNAP network devices is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the microprogramming software of the Dell PowerProtect Data Manager DM5500, caused by buffer overflow in the queue, allows an attacker to trigger an emergency shutdown of the application or execute arbitrary code.
The vulnerability of the microprogramming software of the Dell PowerProtect Data Manager DM5500 backup device is caused by buffer overflow in the queue. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the application to crash or execute arbitrary code...
The vulnerability of Schneider Electric EcoStruxure IT Gateway’s software for communicating with controlled devices stems from the use of pre-installed credentials. This allows a perpetrator to escalate their privileges.
The vulnerability of Schneider Electric EcoStruxure IT Gateway software for communication with controlled devices is related to the use of pre-installed credentials. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Neural Engine component of the macOS operating system allows a hacker to execute arbitrary code with root privileges.
The vulnerability of the macOS operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code with kernel privileges...
The vulnerability of the Rapid SCADA system, related to the improper assignment of permissions for critical resources, allows a intruder to increase their privileges.
The vulnerability of the SCADA system Rapid SCADA is related to the incorrect assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability in the PMRChangeSparseMemOSMem driver of the PowerVR GPU graphics processing unit in Android and ChromeOS operating systems allows attackers to escalate their privileges.
The vulnerability of the PMRChangeSparseMemOSMem driver in the PowerVR GPU graphics processing subsystem for Android and ChromeOS systems stems from the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to gain increased privileg...
The vulnerability of the WLAvalancheService service in the Avalanche device management system allows a hacker to execute arbitrary code.
The vulnerability of the WLAvalancheService service in the mobile device management system Avalanche is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially created data...
The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.
The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the `perf_event_validate_size()` function in the kernel/events/core.c module of the perf subsystem in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information, thereby enhancing their privileges within the system.
The vulnerability of the perfeventvalidatesize function in the kernel/events/core.c module of the Linux operating system’s perf subsystem is related to writing beyond the boundaries of a allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the Helix Core version control software, related to improper code generation management, allows a perpetrator to execute arbitrary code.
The vulnerability of the Helix Core version control software is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability in the set of tools for developing software to create Sentry-Javascript web applications arises from insufficient validation of incoming requests. This allows a hacker to perform an SSRF attack.
The vulnerability of the Sentry-Javascript software development tool for creating web applications is related to insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...
The vulnerability of the X509_check function in the OpenConnect client allows a hacker to gain access to confidential data.
The vulnerability of the X509check function in the OpenConnect client involves deficiencies in handling exceptional states. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data...
The vulnerability of the “Side Panel” control in the Google Chrome browser allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the “Side Panel” control in the Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker who operates remotely to gain unauthorized access to protected information through a specially created web page...
The vulnerability of the Downloads component of the Google Chrome browser allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Downloads component of the Google Chrome browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially...
The vulnerability of the Printing component in the Google Chrome browser allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Printing component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created web page...
The vulnerability in the set of utilities for VMware Tools on MacOS, related to errors in privilege management, allows a perpetrator to escalate their privileges.
The vulnerability of the VMware Tools utility for MacOS operating systems is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the tgfile.htm function in the microprogramming software for D-Link routers such as DI-7003GV2, DI-7100G, DI-7100GV2, DI-7200G, DI-7200GV2, DI-7300G, and DI-7400G allows a hacker to execute arbitrary code.
The vulnerability of the tgfile.htm function in the microprogramming software for D-Link routers such as DI-7003GV2, DI-7100G, DI-7100GV2, DI-7200G, DI-7200GV2, DI-7300G, and DI-7400G lies in the fact that the operation’s output goes beyond the buffer in memory. Exploiting this vulnerability allo...
The vulnerability of the formSetWanNonLogin function in the D-Link DIR-619L router software allows a hacker to cause a service failure.
The vulnerability of the formSetWanNonLogin function in the D-Link DIR-619L router microprogramming system is related to the writing of data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...
The vulnerability of the Prompts component in the Google Chrome browser allows attackers to perform spoofing attacks.
The vulnerability of the Prompts component in the Google Chrome browser is related to the improper use of standard permissions. Exploiting this vulnerability allows a malicious actor to carry out spam attacks using a specially created HTML page...
The vulnerability of the tgfile.asp component of the D-Link DI-7200G V2 router microprogramming system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the tgfile.asp component of the D-Link DI-7200G V2 router microprogramming system is related to the issue where operations are performed outside the buffer in memory when processing the fn parameter. Exploiting this vulnerability allows an attacker to compromise the...
The vulnerability of the declarative delivery tool for GitOps on Kubernetes Argo CD, related to deficiencies in pathname restrictions for directories, allows attackers to gain unauthorized access to protected information.
The vulnerability of GitOps’ continuous delivery tool for Kubernetes Argo CD is related to shortcomings in pathname restrictions for directories. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of the Vim text editor, related to a division by zero error, allows a hacker to execute arbitrary code.
The vulnerability of the Vim text editor is related to a division by zero error. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability in the Splunk Web interface of the Splunk Enterprise operating system’s operational analysis platform allows a perpetrator to execute arbitrary code and gain increased privileges.
The vulnerability in the Splunk Web interface of the Splunk Enterprise operating system’s operational analysis platform is related to an incorrect initialization of resources when processing the OPENSSLDIR value. Exploiting this vulnerability allows an attacker to execute arbitrary code and gain...
The vulnerability in web browsers Firefox ESR, Firefox, and the email client Thunderbird involves the concealment of important security information. This allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerabilities in web browsers Firefox ESR, Firefox, and the email client Thunderbird involve the concealment of important security-related information. Exploiting these vulnerabilities can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause servi...
The vulnerability of the microprogrammed software of SIMATIC MV540, MV550, and MV560 barcode readers, related to uncontrolled resource consumption, allows a intruder to cause malfunctions during maintenance operations.
The vulnerability of the microprogramming software for SIMATIC MV540, MV550, and MV560 barcode readers is related to an uncontrolled consumption of resources during the processing of IP packets. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the Apache Airflow Hive Provider, a network software tool, stems from insufficient validation of input data. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Apache Airflow Hive Provider network software exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the `usb_giveback_urb` function in Linux kernel allows a hacker to trigger a service failure.
The vulnerability of the usbgivebackurb function in Linux operating systems is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows an attacker to cause a service failure...
The vulnerability of HMI/SCADA CONPROSYS HMI, which stems from insufficient verification of incoming requests, allows a hacker to perform an SSRF attack.
The vulnerability of HMI/SCADA CONPROSYS HMI is related to insufficient checking of incoming requests. Exploiting this vulnerability can allow a malicious actor to perform an SSRF attack remotely...
The vulnerability of the HNAP1 protocol implementation in D-Link DIR-846 router microprogramming software allows a attacker to execute arbitrary commands.
The vulnerability of the HNAP1 protocol implementation in D-Link DIR-846 router microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system’s command processing for handling the tomographypingaddress parameter. Exploiting this...
The vulnerability of the built-in software of the ARIS controller, related to uncontrolled resource consumption, allows a intruder to cause a service failure.
The vulnerability of the built-in software of the ARIS controller is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures by sending a specially crafted network packet...
The vulnerability of the PHP framework Icinga Web 2, which allows a hacker to execute arbitrary code.
The vulnerability of the Icinga Web 2 PHP framework lies in the shortcomings of pathname limitation. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
The vulnerability of the /web_cste/cgi-bin/product.ini component of the Telnet service in TOTOLINK T8 microprogramming device allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the /webcste/cgi-bin/product.ini component of the Telnet service in TOTOLINK T8 microprogramming router software is related to the use of pre-installed user credentials. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the Microsoft .NET Framework software platform, related to improper cleaning or release of resources, allows a perpetrator to cause a service failure.
The vulnerability of the Microsoft .NET Framework software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the password reset mechanism of the Automation Education System Apex-VUZ allows a hacker to obtain the user’s password.
The vulnerability of the user password reset mechanism in the Apex-VUZ automation system is related to the use of the SHA-1 encryption algorithm, which lacks sufficient robustness. Exploiting this vulnerability could allow an attacker operating remotely to obtain the user’s password...