98239 matches found
Ffmpeg Pointer Manipulation DoS
The vulnerability of the Ffmpeg multimedia library is related to the use of a zero pointer. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...
ImageMagick WriteSGIImage Buffer Overflow DoS
The vulnerability of the WriteSGIImage function in the console-based image editing tool ImageMagick is related to the execution of operations that exceed the allowable buffer data size. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...
LOCMAN WorkFlow Configurator Code Execution
The vulnerability of the “LOZMAN WorkFlow” and “LOZMAN WorkFlow Configurator” module settings in the engineering data management system and the product lifecycle management system LOZMAN is related to the ability to load files of a dangerous type without limitation. Exploiting this vulnerability...
Oracle VM VirtualBox Core Unauthorized Access
The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Oracle VM VirtualBox Core Unauthorized Access
The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Google Chrome Microsoft Edge Code Execution
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to access to resources through incompatible types. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CDATA Optical Line Terminals Encryption Unauthorized Access
The vulnerability of the CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 optical lin...
FortiClientEMSOnlineInstaller.exe Code Execution
The vulnerability of the installation file FortiClientEMSOnlineInstaller.exe of the Fortinet FortiClient Enterprise Management Server EMS server is related to errors in the path validation mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially...
Cisco Small Business RV160 Web Interface Code Execution
The vulnerability of the web-based management interfaces for Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W microprogramming systems lies in HTTP request processing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Cisco Elastic Services Controller DoS
The vulnerability of the Cisco Elastic Services Controller, a system resource management service, is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
Windows Remote Process Execution Arbitrary Code
The vulnerability of the execution environment for remote process execution in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Fax Compose Form Component Code Execution
The vulnerability of the Fax Compose Form component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
add-apt-repository Data Compromise
The vulnerability of the add-apt-repository utility in the Ubuntu operating system exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected information...
Cisco SD-WAN vManage Unauthorized Access
The vulnerability in the vManage web interface of the Cisco SD-WAN program-defined network is due to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
DOMPurify XSS
The vulnerability of the DOMPurify library is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow an attacker operating remotely to perform a cross-site scripting attack...
Adobe Bridge Buffer Overflow Code Execution
The vulnerability of the Adobe Bridge file manager is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...
Schneider Electric Modicon Quantum Information Disclosure
The vulnerability of the microprogramming software in Schneider Electric Modicon Quantum and Schneider Electric Modicon M340 controllers is related to security mechanism failures. Exploiting this vulnerability can allow attackers to obtain information about the SMTP server configuration, includin...
Microsoft Excel Memory Object Handling Code Execution
The vulnerability of Microsoft Excel editors is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted document...
Microsoft SharePoint Server Code Execution
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
Undertow Sensitive Information Disclosure
The vulnerability of the Undertow web server is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...
Spring Web MVC CSRF
The vulnerability of the spring-webmvc and spring-webflux modules of the Spring Framework is related to the lack of protection against Cross-Site Request Forgery CSRF attacks. Exploiting this vulnerability allows a malicious actor to perform CSRF attacks remotely...
RemoteFX vGPU Windows Code Execution
The vulnerability of the RemoteFX vGPU component in the Microsoft Hyper-V hardware virtualization system’s operating system Windows exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted...
BusyBox udhcp Buffer Overflow Info Disclosure
The vulnerability of the udhcp component in the UNIX-based BusyBox command-line utilities is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
Keycloak Identity Access Management Unauthorized Access
The vulnerability of the Keycloak identity and access management software relates to the use of pre-set registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Information Manager Console Data Compromise
The vulnerability of the Information Manager Console component of the Oracle Knowledge business application relates to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the integrity, confidentiality, and accessibility of protected information...
Estimate and Actual Charges Component Unauthorized Access
The vulnerability of the “Estimate and Actual Charges” component of the Oracle Depot Repair automation software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through the...
FreeImages PluginTIFF Buffer Overflow DoS
The vulnerability of the PluginTIFF.cpp component in the FreeImages graphics format library is related to the execution of operations that exceed the allowable buffer data size limits. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Google Chrome Confidential Data Access
The vulnerability of Google Chrome relates to the use of memory after “speech” is performed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
Cisco AsyncOS Message Filtering DoS
The vulnerability of the message filtering function in Cisco AsyncOS software for Cisco Email Security Appliances and Cisco Content Security Management Appliances exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruption...
Symfony security Cookie Hash Bypass Authentication
The vulnerability of the generateCookieHash function in the Symfony software platform for web application development and management is related to an error during authentication. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process...
Netgear Nighthawk CGI Processor Command Execution
The vulnerability of the CGI processor wlgadv.cgi in Netgear Nighthawk router’s embedded software is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Google Chrome WebRTC Data Compromise
The vulnerability in the Google Chrome browser’s WebRTC implementation arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
Redis HyperLogLog Buffer Overflow DoS
The vulnerability of the HyperLogLog algorithm in the resident database management system for NoSQL Redis stems from a flaw in the HyperLogLog data structure when the SETRANGE command is executed. This command allows the addition of up to 12 bytes of information beyond the stack limit. Exploiting...
Google Chrome Memory Corruption
The vulnerability in the Google Chrome web browser is related to errors during the validation of the length of regular expressions. Exploiting this vulnerability allows an attacker to cause memory corruption by using a specially crafted web page...
Cisco IOS 802.11r Fast Transition DoS
The vulnerability of the Fast Transition function in the 802.11r portlet implementation of Cisco IOS Access Points is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially crafted replay events...
LIGO! Soft Comfort Access Control Code Execution
The vulnerability of the LOGO! Soft Comfort development software is related to access control errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code upon opening a specially crafted project...
Phusion Passenger Symbolic Link Access
The vulnerability in the Phusion Passenger web server relates to the ability to create symbolic links between a REVISION field and any arbitrary file in the system. Exploiting this vulnerability could allow an attacker to gain access to confidential data...
VirtualBox Full Control
The vulnerability of the Core component of the Oracle VM VirtualBox virtualization tool is related to lack of access control mechanisms. Exploiting this vulnerability can allow an attacker to gain full control over the application...
libcaca Graphics Library Heap Buffer Overflow Unauthorized Access
The vulnerability of the getrgbadefault function in the libcaca graphics library is related to integer overflow. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Medtronic MiniMed Information Disclosure
The vulnerability of Medtronic MiniMed 508, 522, 523, 523K, 551, 722, 723, 723K, and 751 medical devices lies in the transmission of protected information in an unencrypted form. Exploiting this vulnerability could allow an intruder to disclose protected information...
Outside In Filters Component Unauthorized Access
The vulnerability of the Outside In Filters component within the software development kit SDK of Outside In Technology is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected data or cause service failures...
Adm-zip extractDir Code Execution
The vulnerability of the extractDir function in the Node.js library for working with zip files in the Adm-zip library is related to an incorrect limitation on the path name of the directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially...
Cisco Policy Suite Cluster Manager Privilege Escalation
The vulnerability of the Cluster Manager component of the Cisco Policy Suite management software is related to the use of pre-installed user credentials. Exploiting this vulnerability could allow an attacker to gain access to the system and execute arbitrary commands with root privileges...
SMB Service RouterOS Code Execution
The vulnerability of the SMB service in the RouterOS operating system from MikroTik arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Cisco IOS DHCP Relay Code Execution
The vulnerability of the DHCP relay subsystem in Cisco IOS and Cisco IOS XE systems is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a Denial-of-Service attack DoS, along with a system reboot, using a specially crafted DHCPv...
Chakra JavaScript Engine Code Execution
The vulnerability in the Chakra JavaScript engine of Microsoft Edge occurs due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause memory corruption...
glibc Heap Buffer Overflow DoS
The vulnerabilities of the xdrbytes and xdrstring functions in the library that handles system calls and core glibc functions are related to the reclamation of unreliable data stored in memory after deserialization of buffers. Exploiting these vulnerabilities allows a remote attacker to cause a...
Windows Privilege Escalation
The vulnerability of the Graphical Device Interface GDI in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating locally, to enhance their privileges through a specially created application...
McAfee VirusScan Enterprise Code Execution
The vulnerability of the McAfee VirusScan Enterprise antivirus software is related to improper verification of the cryptographic signature. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code using a specially created file...
Android Code Execution
The vulnerability related to privilege escalation of the HTC Android operating system’s audio codecs is linked to access control deficiencies. Exploiting this vulnerability allows a remote attacker to execute arbitrary local malware code within the kernel context. This issue is considered “highly...