The vulnerability in the function of the common/InputStreamHelper.java library of the MPXJ library allows a hacker to write files to arbitrary locations.

The vulnerability in the common/InputStreamHelper.java library of the MPXJ library exists due to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to write files to arbitrary locations...

The vulnerability of the tcpdump tool for capturing and analyzing network traffic in a software-defined Cisco SD-WAN network allows a hacker to elevate their privileges to the root level.

The vulnerability of the tcpdump tool for capturing and analyzing network traffic in a software-defined Cisco SD-WAN network is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...

The vulnerability of the components of the Cisco Email Security Appliance, a system for email security management, and the Cisco Content Security Management Appliance, a system for content security management, as well as the Cisco Web Security Appliance, an internet gateway, allows attackers to gain unauthorized access to protected information.

The vulnerability of the components of the Cisco Email Security Appliance, the Cisco Content Security Management Appliance, and the Cisco Web Security Appliance involves a lack of authentication token requirements. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

The vulnerability of the “energo” database of the KTS “Mayak”, which allows a intruder to gain unauthorized access to protected information

The vulnerability of the “energo” database of the “Mayak” system is related to the storage of passwords in an unencrypted form. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

The vulnerability of the Search Integration Engine component of the Oracle E-Business Suite Secure Enterprise Search software product allows a malicious individual to gain unauthorized access to read, modify, add, or delete data.

The vulnerability of the Search Integration Engine component of the Oracle E-Business Suite Secure Enterprise Search product is related to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to read, modify,...

The vulnerability of the Microsoft .NET Framework software, related to errors in memory object handling, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the Microsoft .NET Framework software platform is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Windows Application Compatibility Client Library allows a perpetrator to enhance their privileges.

The vulnerability of the Windows Application Compatibility Client Library is related to errors in processing Windows registry operations. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability in the web interface of the LuCI configuration interface in the embedded operating system OpenWrt allows a hacker to manipulate inter-site requests.

The vulnerability of the LuCI configuration web interface in the embedded operating system OpenWrt exists due to the improper functioning of the mechanism for protecting the web page structure. Exploiting this vulnerability allows a malicious actor to manipulate inter-site requests using certain...

The vulnerability of the Adobe Bridge file manager, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system remotely...

The vulnerability of the lbs_ibss_join_existing function (drivers/net/wireless/marvell/libertas/cfg.c) in the Marvell WiFi kernel driver for the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the lbsibssjoinexisting function drivers/net/wireless/marvell/libertas/cfg.c in the Marvell WiFi kernel driver for the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential...

The vulnerability of the HTMLParser module from django.utils.html.strip_tags in the Django web development framework allows a attacker to cause a denial-of-service attack.

The vulnerability of the HTMLParser module in django.utils.html.striptags of the Django web development framework is related to a slow evaluation of large input data, which contain large sequences of incomplete HTML objects. Exploiting this vulnerability may allow an attacker to cause service...

The vulnerability of Intel NVMe and Intel RSTe driver installers is related to privilege management errors, allowing attackers to elevate their privileges.

The vulnerability of Intel NVMe and Intel RSTe driver installers is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Extensibility Framework component of the Enterprise Manager Base Platform allows a perpetrator to gain access to modify, add, or delete data, to gain unauthorized access to protected information, or to cause service failures.

The vulnerability of the Extensibility Framework component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected...

The vulnerability of Brodade’s IP and SAN network management system, related to deficiencies in user account storage, allows unauthorized access to protected information by attackers.

The vulnerability of the Brocade Network Advisor system for managing IP networks and Storage Area Networks is related to deficiencies in data storage. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through access to the JMX console...

The vulnerability of the canvas objects in browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows attackers to disclose protected information.

The vulnerability of the Canvas object in browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

The vulnerability of the animation reproduction function in Blender’s software for creating 3D computer graphics is caused by a full-integer overflow, allowing an attacker to execute arbitrary code.

The vulnerability of the animation reproduction function in Blender’s 3D computer graphics software is caused by a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created AVI file...

The vulnerability of the fly-admin-int-check integrity control utility in the Astra Linux operating system, which allows a perpetrator to trigger a service failure.

The vulnerability of the fly-admin-int-check integrity control utility in the Astra Linux operating system is related to an unexpected termination of the program upon exit. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

The vulnerability of the libssh2 library, related to writing beyond the buffer boundaries in memory, allows a attacker to cause a service failure, execute arbitrary code, or disclose sensitive information.

The vulnerability of the libssh2 library lies in the writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service failures, execute arbitrary code, or disclose sensitive information...

The vulnerability in the Google Chrome web browser, related to errors in checking the length of regular expressions, allows a hacker to trigger memory corruption.

The vulnerability in the Google Chrome web browser is related to errors during the validation of the length of regular expressions. Exploiting this vulnerability allows an attacker to cause memory corruption by using a specially crafted web page...

The vulnerability of the WebUSB protocol implementation in Google Chrome web browsers allows a perpetrator to execute arbitrary code.

The vulnerability of the WebUSB protocol implementation in Google Chrome’s web browser is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

The vulnerability in the FortiOS operating system’s web interface allows a hacker to bypass the verification of the "APSCOOKIE" cookie parameter.

The vulnerability in the FortiOS operating system’s web interface is related to the absence of the necessary encryption step. Exploiting this vulnerability allows a malicious actor to bypass the verification of the “APSCOOKIE” cookie parameter, which is used to protect information transmitted via...

The vulnerability of the crop_page() function in the PoDoFo software library, which allows a hacker to trigger a service failure.

The vulnerability of the croppage function in the PoDoFo software library is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially crafted file...

The vulnerability of the memcpy_fromiovecend() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the memcpyfromiovecend function in the Linux operating system is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the JunOS operating system, related to security configuration errors, allows attackers to compromise the integrity of protected information.

The vulnerability of the JunOS operating system is related to security configuration errors due to reserved multicast addresses like 224.0.0.x not being correctly aligned with addresses like 224.x.x.x. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected...

The vulnerability of the sub-component of the CRM User Management Framework within the Oracle Common Applications component of the Oracle E-Business Suite allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the CRM User Management Framework component of the Oracle Common Applications system, part of the Oracle E-Business Suite, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using t...

The vulnerability of the nettle-hash cryptographic hash function’s implementation, caused by segmentation errors, allows a hacker to trigger a service failure.

The vulnerability of the nettle-hash cryptographic hash function lies in segmentation errors. Exploiting this vulnerability could allow an attacker to cause a service failure in an application by entering a specially crafted sequence of data into the command line...

The vulnerability in the platform for creating a unified database and electronic registration of residential properties, “BAR.- ”, exists due to the failure to address the issue of eliminating special elements used in SQL queries. This allows a violator to obtain the contents of the database.

The vulnerability in the platform for creating a unified database and electronic registration of residential properties, “BAR.- ”, exists due to the failure to take measures to neutralize special elements used in SQL queries. Exploiting this vulnerability can allow an attacker, operating remotely...

The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite allows a hacker to execute HTML code.

The vulnerability of the “Security Management Center” component of the Dr.Web Enterprise Security Suite exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML code into the user’s browser by placin...

The vulnerability of the Connector/J sub-component of the MySQL Connectors component of the Oracle MySQL database management system allows a hacker to gain full control over the application.

The vulnerability of the Connector/J sub-component of the MySQL Connectors component of the Oracle MySQL database management system is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain full control over the application using the JDBC protocol...

The vulnerability in the web interface of the microprogramming software for Cisco IP Phones series 8800 allows a perpetrator to cause a service failure.

The vulnerability of the web interface of Cisco IP phones—IP Phone 8800, IP Conference Phone 8832, IP Phone 8821, and IP Phone 8821-EX—is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Java Advanced Management Console (Server) component of the Oracle Java SE software platform allows a perpetrator to gain unauthorized access to protected data or cause service failures.

The vulnerability of the Java Advanced Management Console Server component of the Oracle Java SE software platform is related to insufficient access control. Exploiting this vulnerability may allow an attacker operating remotely to gain unauthorized access to protected data or cause service...

The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to gain full control over the application.

The vulnerability of the Core component in Oracle VM VirtualBox is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Microsoft JET Database Engine database driver on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Vulnerabilities of Microsoft Office packages, Office Online Server, Office Web Apps Server, Office Word Viewer, SharePoint Enterprise Server, SharePoint Server, Word, and Office 365, related to memory object processing errors, allow attackers to execute arbitrary code.

The vulnerability of Microsoft Office packages, Office Online Server, Office Web Apps Server, Office Word Viewer, SharePoint Enterprise Server, SharePoint Server, Word, and Office 365 exists due to errors in memory object handling. Exploiting this vulnerability can allow a malicious actor to...

The vulnerability of the Microsoft Exchange Server mail server, related to errors in memory object processing, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Exchange Server exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the system user by sending a specially crafted email message...

The vulnerability of the Windows operating system, related to insecure management of privileges, allows a perpetrator to execute processes with elevated privileges.

The vulnerability of the Windows operating system is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the NormaCS automation tool for working with regulatory documents allows a violator to execute any code they desire.

The vulnerability of the NormaCS tool for automating the processing of regulatory documents is related to the use of the MFC library set. It arises due to deficiencies in the restriction on the searchable range of dynamically loaded libraries. Exploiting this vulnerability could allow a malicious...

The vulnerability in the Cisco Prime License Manager’s web infrastructure, related to the lack of protection for SQL query structures, allows attackers to execute arbitrary SQL queries.

The vulnerability in the Cisco Prime License Manager’s web infrastructure is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

The vulnerability of the Catalog Service component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Google Chrome browser’s Catalog Service component exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted HTML page from a remote location...

The vulnerability of the Product Diagnostic Tools component of the Order Management system allows a perpetrator to gain full control over the application.

The vulnerability of the Product Diagnostic Tools component in the Order Management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the application...

The vulnerability of the Outside In Filters component of the software development kit (SDK) provided by Outside In Technology allows a perpetrator to gain unauthorized access to protected data or cause service failures.

The vulnerability of the Outside In Filters component within the software development kit SDK of Outside In Technology is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected data or cause service failures...

The vulnerability of Oracle Marketing’s User Interface component allows a hacker to gain unauthorized access to protected data.

The vulnerability of Oracle Marketing’s User Interface component is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

The vulnerability of the NVIDIA Graphics Drivers component for the Mac OS X operating system allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the NVIDIA Graphics Drivers component for the Mac OS X operating system is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability allows an attacker to execute arbitrary code with kernel privileges through a specially...

The vulnerability of the DHCP relay subsystem in Cisco IOS and Cisco IOS XE allows a attacker to execute arbitrary code with administrator privileges, or to cause a service failure and system reboot.

The vulnerability of the DHCP relay subsystem in Cisco IOS and Cisco IOS XE systems is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a Denial-of-Service attack DoS, along with a system reboot, using a specially crafted DHCPv...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability in the Chakra JavaScript engine of the Microsoft Edge browser allows a hacker to execute arbitrary code or trigger memory corruption.

The vulnerability in the Chakra JavaScript engine of Microsoft Edge occurs due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause memory corruption...

The vulnerability in the drivers/regulator/core.c component of the Android operating system allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the regulatorenagpiofree function in the drivers/regulator/core.c component of the Android operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to increase their privileges or cause a service failure the...

The vulnerability of the Mac OS X operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the Intel Graphics Driver component in the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information through a specially created applicatio...

The vulnerability of the Linux operating system’s kernel, which allows a hacker to obtain confidential information

The vulnerability of the serialmultiportstruct structure in the Linux operating system is related to access control deficiencies. Exploiting this vulnerability could allow a local attacker to obtain confidential information...

Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the kernel-image-2.6-em64t-p4 operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious actors...