98239 matches found
Windows Hyper-V Privilege Escalation
The vulnerability of the Windows Hyper-V hardware virtualization system is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Tenda F1202 Form Wifi Basic Set Manipulation
The vulnerability of the formWifiBasicSet function in the Tenda F1202 router’s microprogramming software is related to the operation that goes beyond the buffer in memory when processing the security parameter. Exploiting this vulnerability could allow an attacker to compromise the accessibility ...
mhi_queue Heap Buffer Overflow DoS
Vulnerability of the mhiqueue function in the drivers/bus/mhi/core/main.c module – The MHI driver in the Linux kernel is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux x86 KVM nested_get_evmcs_page Heap Buffer Overflow DoS
The vulnerability of the nestedgetevmcspage function in the arch/x86/kvm/vmx/nested.c module of the virtualization subsystem on the Linux operating system’s x86 kernel platform is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to compromise the...
Linux kernel tpm2_seal_trusted Buffer Overflow DoS
The vulnerability of the tpm2sealtrusted function in the security/keys/trusted-keys/trustedtpm2.c file of the Linux kernel is related to code errors. Exploiting this vulnerability could allow an attacker to trigger a service failure...
Linux RISC-V Kernel kprobe_fault_handler Heap Buffer Overflow DoS
The vulnerability of the kprobefaulthandler function in the arch/riscv/kernel/probes/kprobes.c file of the module for the Linux operating system’s RISC-V architecture-based kernel involves incorrect input validation. Exploiting this vulnerability could allow an attacker to trigger a service failu...
Tenda AC9 Router Code Execution
The vulnerability of the fromAdvSetMacMtuWan function in the Tenda AC9 router’s microprogramming software is related to the buffer overflow attack when processing the wanMTU parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...
Intel QuickAssist Technology Driver Heap Buffer Overflow DoS
The vulnerability of the Intel QuickAssist Technology QAT driver package is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
NPO ‘MIR’ Cryptographic Algorithm Defect Brute Force
The vulnerability of the software products developed by LLC “NPO ‘MIR’ lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability allows a remote attacker to execute an attack using brute-force methods...
WEEEK DTD Recursive Reference DoS
The vulnerability of the WEEEK task and project management service is related to improper restrictions on recursive references to entities in the DTD. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Elastic Defend DoS
The vulnerability of the software for detecting, monitoring, and responding to Elastic Defend threats is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow attackers to cause service failures...
Cisco Expressway XSS
The vulnerability in the web interface for managing microprogramming software in Cisco Expressway is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
Internet Connection Sharing Windows DoS
The vulnerability of the Internet Connection Sharing ICS function in Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Microsoft Visual Studio Installer Privilege Escalation
The vulnerability of the installer of the Microsoft Visual Studio software is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a perpetrator to enhance their privileges...
Firebird Network Authentication Protocol Interception
The vulnerability of the network authentication protocol used by the Firebird software’s “Population Cancer Registry” and “Hospital Cancer Registry” components is related to the use of a insecure authentication method called LegacyAuth. Exploiting this vulnerability allows a malicious actor to...
Strapi Arbitrary JavaScript Execution
The vulnerability of the CMS Strapi content management platform, related to the lack of security measures for web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code by loading a specially crafted PDF file remotely...
Tenda AC18 Router formSetCfm Code Execution
The vulnerability of the formSetCfm function in the Tenda AC18 router’s microprogramming software is related to the issue where the write operation goes beyond the buffer boundaries in memory when processing the funcpara1 parameter. Exploiting this vulnerability allows a remote attacker to execut...
GoCD CI/CD XXE
The vulnerability of the CI/CD server of GoCD is related to an incorrect restriction on XML references to external objects. Exploiting this vulnerability allows a malicious actor to perform XXE attacks remotely...
SuiteCRM Authentication Bypass
The vulnerability of the SuiteCRM customer relationship management system is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to bypass security restrictions and gain access to read, modify, or delete data...
Intel QuickAssist Driver Heap Buffer Overflow Unauthorized Access
The vulnerability of the Intel QuickAssist Driver Package Intel QAT Engine for OpenSSL is related to improper handling of threads. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
Entity Form Steps Module Drupal XSS
The vulnerability of the Entity Form Steps module in the Drupal CMS system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
System Component Code Execution
The vulnerability of the System component of the Android operating system is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
HPE Aruba Networking Web Interface Code Execution
The vulnerability of the web interface for managing microprogramming software in HPE Aruba Networking 501 wireless client bridges is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the...
Cisco SD-WAN vEdge UDP Packet Verification DoS
The vulnerability of the UDP packet verification mechanism in Cisco SD-WAN vEdge microprogramming software lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially...
Adobe Connect XSS
The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute XSS attacks by injecting malicious scripts into form fields...
Linux qcom Component DoS
The vulnerability of the lpassgetdmactlhandle function in the qcom component of the Linux operating system is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Substance 3D Painter Buffer Overflow
The vulnerability of the Substance 3D Painter software for creating textures and materials for 3D models arises due to an overflow in the buffer area. Exploiting this vulnerability allows a hacker to execute arbitrary code using a specially created file...
Adobe InDesign Memory Walking Disclosure
The vulnerability of Adobe InDesign’s computer layout automation tool is related to memory-walking attacks. Exploiting this vulnerability can allow an attacker to bypass ASLR protection and disclose the protected information...
Substance 3D Painter Buffer Overflow
The vulnerability of the Substance 3D Painter software for creating textures and materials for 3D models arises from an overflow in the buffer area. Exploiting this vulnerability allows a hacker to execute arbitrary code in the context of the current user, using a specially created file...
Teamcenter Visualization Buffer Overflow Code Execution
The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment relates to the execution of operations beyond the buffer in memory when processing WRL files. Exploiting this vulnerability could allow an attacker to...
Cisco Unified Communications Manager XSS
The vulnerability of the Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition SME web interfaces is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows an attacker to perform cross-site scripting...
IBM Cloud Pak for Multicloud Management Deserialization Command Execution
The vulnerability of the monitoring, control, automation, and management tool for IBM Cloud Pak for Multicloud Management lies in the shortcomings of the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending a specially crafted...
DrayTek Vigor Router getSyslogFile function unauthorized access
The vulnerability of the getSyslogFile function in the mainfunction.cgi web interface of the DrayTek Vigor router software is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain...
Adobe After Effects Buffer Overflow DoS
The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...
Microsoft Windows LDAP Code Execution
The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
SINEC INS SFTP Code Execution
The vulnerability of the SFTP module in the SINEC INS software for managing network infrastructure is related to errors in file upload path cleaning. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
SCALANCE M-800 Family Improper Access Control DoS
The vulnerability of microprogrammed software in industrial routers of the SCALANCE M-800 family including S615, MUM-800, and RM1224 is related to improper access control. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Siemens Solid Edge Buffer Overflow
The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created PSM file...
speakup Kernel DoS
The vulnerability of the speakup component in the Linux operating system’s kernel is related to a memory corruption in the getword function. Exploiting this vulnerability can allow an attacker to cause a service failure...
Autodesk Navisworks w3dtk.dll Code Execution
The vulnerability of the w3dtk.dll library in Autodesk Navisworks software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Autodesk Navisworks w3dtk.dll Code Execution
The vulnerability of the w3dtk.dll library in Autodesk Navisworks software relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
OPC WorkstationST Auth Bypass File Write
The vulnerability of the OPC server WorkstationST is related to the absence of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to record or rerecord configuration files on the server remotely...
libodxdll.dll Code Execution
The vulnerability of the libodxdll.dll library in software for simulation, design, and drawing in AutoCAD is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information, execu...
Python subprocess DoS
The vulnerability of the subprocess module in the Python programming language interpreter is related to privilege management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Mitel MiCollab SQL Injection Code Execution
The vulnerability of the components of web conference services and the collaboration application platform Mitel MiCollab is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code...
D-Link DIR-878/DIR-882 SetVLANSettings Command Execution
The vulnerability of the SetVLANSettings function in the prog.cgi script of D-Link DIR-878 and DIR-882 routers exists due to the failure to take measures to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary...
Zimbra Collaboration Suite SRF
The vulnerability of the Zimbra Collaboration Suite’s email management system is related to insufficient validation of incoming requests. Exploiting this vulnerability could allow a malicious actor to carry out a SRF attack remotely...
Microsoft Office Microsoft 365 Apps for Enterprise Insecure Search Path
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the use of an insecure search path. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Microsoft Windows Console Code Execution
The vulnerability of Microsoft Windows operating system consoles relates to errors in processing input data. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user downloads a specially crafted MSC file...
Linux BlueZ HID Profile Arbitrary Command Execution
The vulnerability of the HID Profile interface of the Bluetooth protocol stack for the Linux BlueZ operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...