98239 matches found
Android Code Execution
The vulnerability related to privilege escalation of the HTC Android operating system’s audio codecs is linked to access control deficiencies. Exploiting this vulnerability allows a remote attacker to execute arbitrary local malware code within the kernel context. This issue is considered “highly...
Debian GNU/Linux Local Compromise Data Compromise
The kernel-image-2.6-amd64-k8 package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the libsndfile1-dev package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the linux-headers-2.6.26-2-686 package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the linux-headers-2.6.26-2-4kc-malta package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Java Platform Data Compromise
The vulnerability of the Java SE and Java SE Embedded software platform allows a malicious actor to compromise data integrity by using the Security subcomponent...
Cisco Wireless LAN Controller DoS
The vulnerability in the monitoring service of Multimedia Delivery MLD for Cisco Wireless LAN Controllers WLC – when the MLDv2 Snooping function is enabled – allows malicious actors operating remotely to trigger a device reboot by using improperly crafted IPv6 MLDv2 packets...
SIMATIC WinCC Privilege Escalation
The vulnerability of Siemens SIMATIC WinCC software is related to errors in the code of the WinCC WebNavigator server. Exploiting this vulnerability allows authorized users to remotely escalate their privileges...
Zhuhai RaySharp Access Information Disclosure
The software of the video surveillance device Zhuhai RaySharp has a default root user password. Exploiting this vulnerability allows a malicious actor to gain access to protected information via the TCP port 23 or 9000...
WebSphere Application Server XSS
The vulnerability of WebSphere Application Server applications exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject any desired web or HTML code using a specially crafted URL...
Moodle Access Information Disclosure
The vulnerability of the Moodle learning management system’s sub-component, lib/navigationlib.php, is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information using the student...
CentOS Data Compromise
Multiple vulnerabilities exist in the krb5-1.10.3 package of the CentOS operating system. Exploitation of these vulnerabilities can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely by a malicious individual...
Debian GNU/Linux Data Compromise
The kdeedu-doc-html package of the Debian GNU/Linux operating system has multiple vulnerabilities that, if exploited, could lead to the compromise of protected information. These vulnerabilities can be exploited remotely...
OpenSUSE Information Disclosure
The vulnerability of the openSUSE operating system’s openLDAP2-client-64bit package can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...
OpenSUSE Data Compromise
The multiple vulnerabilities in the gpg2 package of the OpenSUSE operating system can lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
OpenSUSE Data Compromise
The multiple vulnerabilities in the vnc operating system package of OpenSUSE can lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
OpenSUSE Data Compromise
The multiple vulnerabilities in the xorg-x11-driver-options package of the OpenSUSE operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
OpenSUSE Data Compromise
The vulnerability of the bytefx-data-mysql package of the operating system OpenSUSE can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited remotely...
OpenSUSE Data Compromise
The vulnerability of the mono-core-32bit operating system package of openSUSE can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited remotely...
OpenSUSE Data Compromise
The vulnerability of the mono-devel package in the OpenSUSE operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited remotely...
openSUSE Compromise Protected Information
The adm8211-kmp-debug package of the OpenSUSE operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Red Hat Enterprise Linux Data Compromise
The vulnerability of the polkit-qt-0.103.0 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the libgda2-ruby package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the libgnomevfs2-ruby package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Local Compromise Data Compromise
The multiple vulnerabilities in the udev package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious individuals...
Debian GNU/Linux Local Compromise Data Compromise
The multiple vulnerabilities in the xboing package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious individuals...
Debian GNU/Linux Remote Compromise Protected Information
The hostap-modules-2.4.27-4-k7 package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the kernel-headers-2.4.27-4-sparc64-smp Debian GNU/Linux operating system can lead to a violation of the accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...
OpenSUSE Data Compromise
The multiple vulnerabilities in the ppc64-diag-debugsource package of the OpenSUSE operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...
Red Hat Enterprise Linux Data Compromise
The vulnerability of the autofs-5.0.1 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...
Red Hat Linux Data Compromise
The multiple vulnerabilities in the cross-ppc64 operating system of the Red Hat Linux package can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...
OpenSUSE Data Compromise
The multiple vulnerabilities in the cloop-kmp-desktop package of the OpenSUSE operating system can be exploited, leading to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
OpenSUSE Data Compromise
The multiple vulnerabilities in the cloop-debugsource package of the OpenSUSE operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
OpenSUSE Data Compromise
The multiple vulnerabilities in the libtdb1-debuginfo-32bit package of the OpenSUSE operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...
Red Hat Enterprise Linux Data Compromise
The multiple vulnerabilities in the netpbm-progs-10.25 package of the Red Hat Enterprise Linux operating system can be exploited, resulting in a violation of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Webasyst Shop-Script CMS SQL Injection
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...
Webasyst Shop-Script CMS Code Execution
The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system is related to improper code generation. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
iFlightDoc Path Traversal Unauthorized Access
The vulnerability of the iFlightDoc onboard documentation system is related to an incorrect limitation on the name of the path to the catalog h. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...
CrocoTime employee working time management system Code Execution
The vulnerability in the CrocoTime employee working hours tracking system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
FortiOS Certificate Authenticity Verification
The vulnerability of the FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to improper verification of certificate authenticity. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and...
Linux net/ceph/osdmap crush_decode Heap Buffer Overflow
The vulnerability of the crushdecode function in the net/ceph/osdmap.c module of the Linux kernel is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...
Linux drivers/greybus/gb-beagleplay.c Heap Buffer Overflow
The vulnerability of the cc1352bootloaderrx function in the drivers/greybus/gb-beagleplay.c module of the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...
Linux TPM-core Device Driver Heap Buffer Overflow DoS
The vulnerability of the tpmdevrelease function in the drivers/char/tpm/tpm-chip.c module of the Linux TPM-devices driver module is related to improper inter-process communication for critical data deletion. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux cdns_resume() Buffer Overflow DoS
The vulnerability of the cdnsresume function in the drivers/usb/cdns3/core.c file of the Linux device driver framework relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Navigation component in Google
The vulnerability of the Navigation component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, as well as cause service failures through a specially created HTML page...
NDR RDPEAR RDP-client Parser Unauthorized Access
The vulnerability of the NDR RDPEAR RDP-client FreeRDP lies in the reading of data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
DIAFAN.CMS SQL Injection
The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
WPE WebKit DoS
The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Skia Graphic Library DoS
The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to errors in HTTP requests processing. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Win32k.sys Privilege Escalation
The vulnerability of the Win32k.sys component of the Windows operating system is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...