98363 matches found
Oracle Web Services Manager Data Access
The vulnerability of the Web Services Security component of the Oracle Web Services Manager exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain read access to data or modify data using specially crafted HTTP...
Oracle Business Intelligence Enterprise Edition Analytics Server Data Read Modify
The vulnerability of the Analytics Server component of the Oracle Business Intelligence Enterprise Edition software relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to gain access to read data or modify data through HTTP requests...
Oracle VM VirtualBox Core Component Data Modification Privilege Escalation
The vulnerability of the Core component in Oracle VM VirtualBox exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to modify, add, or delete data, or cause the system to freeze or, in rare cases, crash...
Oracle VM VirtualBox Privilege Escalation
The vulnerability of the Core component in Oracle VM VirtualBox exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to modify, add, or delete data, or gain privileged access to the infrastructure...
Outside In Filters Component DoS
The vulnerability of the Outside In Filters component within Oracle’s software development kit SDK “Outside In Technology” exists due to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures using the HTTP protocol...
Autodesk Design Review Buffer Overflow
The vulnerability of the syntax analysis implementation for DWF format files in the Autodesk Design Review software lies in the writing beyond buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user, usi...
PHP ziparchive Extract Arbitrary Directories
The vulnerability of the ziparchive::extractto function in the PHP programming language is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability could allow an attacker to create arbitrary directories remotely...
Cisco SD-WAN NETCONF DoS
The vulnerability of the NETCONF protocol implementation in Cisco SD-WAN vEdge software lies in the uncontrolled memory consumption. Exploiting this vulnerability could allow an attacker to cause service failures or trigger an emergency shutdown of the application...
Cisco IP Phone Command Interface Path Traversal
The vulnerability of the command interface of Cisco IP Phone microprogramming software exists due to an incorrect restriction on the path name to the restricted access directory. Exploiting this vulnerability could allow a attacker to read any file in the device’s file system...
PHP http_header_value Buffer Overflow DoS
The vulnerability of the httpheadervalue function ext/standard/httpfopenwrapper.c in the PHP programming language is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause service failures remotely...
CAPITAL VSTAR APOGEE MBC APOGEE MEC APOGEE PXC TAL
The vulnerability of microprogrammed software for controllers CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus is related to errors in processing the TCP header. Exploiting this vulnerability can allow an attacker to gain access to protected informatio...
FTP Server Code Execution
The vulnerability of FTP servers for microprogrammed control devices such as CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus is related to errors during the verification of the MKD/XMKD command length. Exploiting this vulnerability can allow an attack...
MELSEC iQ-F Series FX5U Password Hash Disclosure
The vulnerability of the microprogrammed logic controllers MELSEC iQ-F Series FX5U and MELSEC iQ-F Series FX5UJ lies in the use of a password hash instead of a plain password for authentication. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive...
OTRS Ticket Request System Information Disclosure
The vulnerability of the OTRS ticket request system is related to the disclosure of information. Exploiting this vulnerability allows a malicious actor, who operates remotely, to gain access to confidential data...
SIXEL Libsixel Encoder/Decoder Heap Buffer Overflow DoS
The vulnerability of the stbimage.h component in the SIXEL Libsixel encoder/decoder implementation is related to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability allows a malicious actor to cause service failures using a specially created PSD file...
TerraMaster webNasIPS Access Information Disclosure
The vulnerability of the webNasIPS module in the TerraMaster operating system for data storage devices called TerraMaster TNAS is related to the possibility of executing arbitrary commands. Exploiting this vulnerability could allow a malicious actor to gain access to protected information...
NETGEAR Router Command Injection
The vulnerability of NETGEAR’s integrated routing software devices such as R7850, R7900P, R7960P, R8000, R8000P, RAX200, RAX75, RAX80, RBK752, RBK852, RBR750, RBR850, RBS750, and RBS850 lies in the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to...
NETGEAR Integrated Router Command Injection
The vulnerability of the embedded software of NETGEAR routers such as R6400, R6400v2, R6700v3, R7000, R6900P, R7000P, and R8000 lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...
Local Security Authority Subsystem Service Disclosure Information
The vulnerability of the Local Security Authority Subsystem Service LSASS in the Microsoft Windows operating system relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...
HEVC Video Extensions Code Execution
The vulnerability of HEVC Video Extensions is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft SharePoint Server Code Execution
The vulnerability of Microsoft SharePoint Server packages is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created request from a remote location...
NETGEAR Router Command Injection
The vulnerability of the embedded software of NETGEAR RBS50Y, RBR20, RBR40, RBR50, RBS20, RBS40, RBS50, RBK20, RBK40, and RBK50 routers lies in the lack of measures for cleaning input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...
NETGEAR RAX200 MR60 RAX20 RAX45 RAX80 MS60 RAX15 RAX
The vulnerability of the embedded software of NETGEAR’s RAX200, MR60, RAX20, RAX45, RAX80, MS60, RAX15, RAX50, RAX75, RBR750, RBR850, RBS750, RBS850, RBK752, and RBK852 routers exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a...
Microsoft Defender for IoT Code Execution
The vulnerability of the Microsoft Defender for IoT threat detection mechanism is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted request...
NTFS Privilege Escalation
The vulnerability of the NTFS file system in Windows operating systems is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...
NETGEAR Router Command Injection
The vulnerability of the embedded software of NETGEAR routers such as D6200, D7000, R6020, R6080, R6050, JR6150, R6120, R6220, R6230, R6260, R6800, R6700v2, R6900v2, R7450, AC2100, AC2400, AC2600, and WNR2020 lies in the absence of measures for cleaning input data. Exploiting this vulnerability c...
NETGEAR Router Website Structure Data Compromise
The vulnerability of the embedded software of NETGEAR routers such as CBR40, EAX20, EAX80, EX6120, EX6130, EX7500, R7000, R7900, R8000, RAX200, RBS40V, RBW30, EX3700, MR60, R7000P, RAX20, RAX45, RAX80, EX3800, MS60, R6900P, RAX15, RAX50, RAX75, RBR750, RBR850, RBS750, RBS850, RBK752, and RBK852...
NETGEAR Integrated Routing Software Command Injection
The vulnerability of NETGEAR’s integrated routing software, including models like RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, stems from the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
D-Link DIR-823-Pro Wireless Router Command Execution
The vulnerability of the implementation of the SetWLanApcliSettings function in the microprogramming software for D-Link DIR-823-Pro wireless routers is related to insufficient cleaning of input data during the processing of the ApCliKeyStr parameter. Exploiting this vulnerability allows a remote...
Kerberos Privilege Escalation
The vulnerability of the Kerberos protocol for Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Airflow Command Injection Privilege Escalation
The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to the lack of measures taken to neutralize special elements used in the OS commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary comman...
D-Link DIR-809 Sub Process Code Execution
The vulnerability of the sub80046EB4 /formSetPortTr function in the wireless router software from D-Link, the DIR-809, is related to stack buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code within the system using the created POST request...
HarmonyOS Kernel DoS
The vulnerability of the HarmonyOS operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
ePolicy Orchestrator Extension SQLi
The vulnerability of the ePolicy Orchestrator extension of the McAfee Data Loss Prevention software lies in the lack of measures taken to neutralize special elements used in SQL queries. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...
Adobe XMP-Toolkit-SDK Buffer Overflow DoS
The vulnerability of the software for creating metadata, processing, and exchanging standard sets within the Adobe XMP-Toolkit-SDK is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...
DwaCompressor Component Uncontrolled Resource Consumption DoS
The vulnerability of the DwaCompressor component of the image storage software for OpenEXR files, which supports a wide dynamic range of brightness levels, is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
VAMI Management Interface Code Execution
The vulnerability of the VAMI management interface for VMware vCenter Server and VMware Cloud Foundation virtualization platforms is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code on the operating system...
Cisco IOS XR Data Compromise
The vulnerability of the Cisco IOS XR operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality of the protected information by using a specific command...
Radare2 Use-After-Free DoS
The vulnerability of the Radare2 reverse-engineering system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
PDF Memory Management Data Compromise
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is released. Exploiting the...
Google Chrome V8 Buffer Overflow Information Disclosure
The vulnerability of Google Chrome’s V8 engine is related to insufficient input validation. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...
FortiMail Webmail Unauthorized Access
The vulnerability of FortiMail’s webmail system relates to deficiencies in the checking of path names to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information through specially crafted web requests...
Ceph storage system Data Compromise
The vulnerability of the Ceph storage system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the data...
Cisco IOS XE DoS
The vulnerability of Cisco IOS and Cisco IOS XE software for Cisco Catalyst 4500 and Cisco Catalyst 4500-X network devices is related to exception handling flaws. Exploiting this vulnerability can allow an attacker to trigger a device reboot, a failed termination of the application, or a service...
QEMU Hardware Emulation Heap Buffer Overflow DoS
The vulnerability of the ati2dblt function in the QEMU hardware emulation software is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
Apt Integer Overflow
The vulnerability of the apt-pkg/contrib/extracttar.cc, apt-pkg/deb/debfile.cc, and apt-pkg/contrib/arfile.cc files, which are used for installing, updating, and removing software packages, is related to the lack of data cleaning. Exploiting this vulnerability can allow an attacker to access...
GraphicsMagick HuffmanDecodeImage Integer Overflow DoS
The vulnerability of the HuffmanDecodeImage function in the command-line applications for processing GraphicsMagick image files is related to a numerical overflow of values. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and caus...
ImageMagick WriteSGIImage Buffer Overflow DoS
The vulnerability of the WriteSGIImage function in the console-based image editing tool ImageMagick is related to the execution of operations that exceed the allowable buffer data size. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...
Ffmpeg Pointer Manipulation DoS
The vulnerability of the Ffmpeg multimedia library is related to the use of a zero pointer. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...
ImageMagick ScaleAnyToQuantum Function DoS
The vulnerability of the ScaleAnyToQuantum function in the /MagickCore/quantum-private.h file of the ImageMagick console graphics editor involves integer overflow. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...