92710 matches found
The vulnerability of the trusted execution environment of Virtualization-Based Security (VBS) Enclaves in Windows operating systems allows attackers to circumvent existing security restrictions.
The vulnerability of the trusted execution environment for Virtualization-Based Security VBS in Windows operating systems is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...
The vulnerability of the BmpInput::read_rle_image() function in the src/bmp.imageio/bmpinput.cpp module of the OpenImageIO library allows a attacker to compromise the integrity of the protected information or cause service failures.
The vulnerability of the BmpInput::readrleimage function in the src/bmp.imageio/bmpinput.cpp module of the OpenImageIO library is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information or caus...
The vulnerability of the formWifiBasicSet() function in the microprogramming software for Tenda F1202 allows a hacker to manipulate the accessibility of protected information.
The vulnerability of the formWifiBasicSet function in the Tenda F1202 router’s microprogramming software is related to the operation that goes beyond the buffer in memory when processing the security parameter. Exploiting this vulnerability could allow an attacker to compromise the accessibility ...
The vulnerability of the fromAdvSetMacMtuWan() function in the Tenda AC9 router’s software allows a hacker to execute arbitrary code or cause service failures.
The vulnerability of the fromAdvSetMacMtuWan function in the Tenda AC9 router’s microprogramming software is related to the buffer overflow attack when processing the wanMTU parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...
The vulnerability of the Vnet/IP SCADA system of Yokogawa CENTUM VP allows a intruder to execute arbitrary code and trigger a maintenance failure.
The vulnerability of the Vnet/IP SCADA system of Yokogawa CENTUM VP is related to a countable loss of significance. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands and cause service failures by sending specially crafted packets...
The vulnerability of the SINAMICS S200 servo-system loader, related to deficiencies in authentication procedures, allows a perpetrator to execute arbitrary code.
The vulnerability of the SINAMICS S200 servo drive system’s loader is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the HMI SCADA system of the power automation system, EcoStruxure Power Automation System User Interface (EPAS-UI), related to deficiencies in authentication procedures, allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the HMI SCADA system of the electric power automation system, EcoStruxure Power Automation System User Interface EPAS-UI, is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity,...
The vulnerability of the Delegated License Service (DLS) component of the NVIDIA licensing system allows a perpetrator to gain unauthorized access to protected information and cause service failures.
The vulnerability of the Delegated License Service DLS component of NVIDIA’s licensing system lies in the absence of authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information and cause service...
The vulnerability of PDF-XChange Editor’s document viewing and editing software lies in the possibility of an operation going beyond the buffer in memory, allowing attackers to execute arbitrary code.
The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality lies in the issue of operations going beyond the buffer in memory when processing Doc objects. Exploiting this vulnerability can allow attackers to execute arbitrary code...
The vulnerability of UniFi Protect Camera surveillance systems lies in the lack of measures to neutralize special elements, allowing violators to bypass security restrictions and execute arbitrary codes.
The vulnerability of UniFi Protect Camera surveillance systems lies in the lack of measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to bypass security restrictions and execute arbitrary code...
The vulnerability of Linux operating system’s DRM/AMDGPU cores allows a hacker to trigger a service failure.
The vulnerability of Linux operating system’s DRM/AMDGPU kernel components is related to the assignment of the NULL pointer in the amdgpurasinterruptprocesshandler function. Exploiting this vulnerability can allow an attacker to trigger a service failure...
The vulnerability of Microprogrammed Software in HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed printers arises from buffer overflow in the stack, allowing attackers to execute arbitrary code and gain elevated privileges.
The vulnerability of Microprogrammed Software in HP LaserJet Pro, EHP LaserJet Enterprise, and HP LaserJet Managed printers is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges by sending data in...
The vulnerability of the Dell BSAFE SSL-J cryptographic library, related to mutual locking of execution streams, allows a hacker to cause a service failure.
The vulnerability of the Dell BSAFE SSL-J cryptographic library is related to the mutual blocking of execution streams. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the distributed database management system Apache Cassandra lies in its insecure handling of privileges, allowing attackers to elevate their own privileges.
The vulnerability of the distributed database management system Apache Cassandra lies in the insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability of the Internet Connection Sharing (ICS) function in Windows operating systems allows a hacker to cause a service failure.
The vulnerability of the Internet Connection Sharing ICS function in Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the formSetFirewallCfg function in the microprogramming software for Tenda AC18 allows a hacker to trigger a service failure.
The vulnerability of the formSetFirewallCfg function in the Tenda AC18 router microprogramming system is related to buffer overflow during the processing of the firewallEn parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to perform cross-site scripting attacks (XSS).
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows attackers to perform...
Vulnerability of the Server component: The Oracle MySQL Server component of the database management system, which allows a hacker to cause a service failure.
The vulnerability of the Oracle MySQL Server component of the database management system involves unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
The vulnerability of the VSP Elevation function in the hardware virtualization technology of Windows Hyper-V operating systems allows attackers to elevate their privileges to the SYSTEM level.
The vulnerability of the VSP Elevation function in the hardware virtualization layer of Windows Hyper-V operating systems involves the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...
The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems allows a hacker to increase their privileges.
The vulnerability of the PrintWorkflowUserSvc service in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the Intel QuickAssist (Intel QAT Engine for OpenSSL) driver package, related to improper flow management, allows an attacker to gain unauthorized access to protected information.
The vulnerability of the Intel QuickAssist Driver Package Intel QAT Engine for OpenSSL is related to improper handling of threads. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of the SSH configuration function on SonicOS operating systems allows a hacker to perform an SSRF attack.
The vulnerability of the SSH configuration function in SonicOS operating systems is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...
The vulnerability of the SSL VPN remote access technology implemented on SonicOS operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the SSL VPN remote access technology implemented on SonicOS systems is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the hci_user_confirm_request_evt() function in the net/bluetooth/hci_event.c module of the Linux operating system allows a intruder to compromise the confidentiality of the protected information.
The vulnerability of the hciuserconfirmrequestevt function in the net/bluetooth/hcievent.c module of the Linux kernel is related to improper authorization. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of protected information...
The vulnerability of Adobe Connect web conference software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute XSS attacks.
The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute XSS attacks by injecting malicious scripts into form fields...
The vulnerability of the CI/CD application integration and delivery system provided by JetBrains TeamCity, related to insufficient protection of registration data, allows attackers to disclose protected information.
The vulnerability of the Continuous Integration and Deployment application delivery system CI/CD of TeamCity in JetBrains is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
The vulnerability of the Substance 3D Painter software for creating textures and materials for 3D models arises from buffer overflows in the queue, allowing an attacker to execute arbitrary code.
The vulnerability of the Substance 3D Painter software for creating textures and materials for 3D models arises from an overflow in the buffer area. Exploiting this vulnerability allows a hacker to execute arbitrary code in the context of the current user, using a specially created file...
The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.
The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment relates to the execution of operations beyond the buffer in memory when processing WRL files. Exploiting this vulnerability can allow an attacker to execu...
The vulnerability of the mxsfb component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the mxsfb component in the Linux operating system’s kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the RMT_invite.cgi script of NETGEAR R7000 Wi-Fi routers allows a hacker to execute arbitrary commands.
The vulnerability in the RMTinvite.cgi script of NETGEAR R7000 Wi-Fi routers lies in the lack of data cleaning at the control level when processing the parameter devicename2. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...
The vulnerability of MediaTek’s microprogramming software relates to the execution of operations outside of the buffer in memory, allowing attackers to exploit their privileges.
The vulnerability of MediaTek’s microprogramming software lies in the fact that operations are performed outside the buffer in memory when processing DA files. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the n_gsm component in the Linux operating system’s kernel allows a hacker to execute arbitrary code.
The vulnerability of the ngsm component in the Linux operating system’s kernel is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the driver for the imon component (drivers/media/rc/imon.c) in Linux operating systems allows a hacker to cause a service failure.
The vulnerability of the driver for the imon component drivers/media/rc/imon.c in Linux operating systems is related to an incorrect binding of the interface to the driver due to insufficient validation of input data. Exploiting this vulnerability can allow a perpetrator to cause service failures...
The vulnerability of the library for optimizing machine learning models, Intel Neural Compressor, related to errors in processing input data, allows attackers to exploit it to gain increased privileges.
The vulnerability of the Intel Neural Compressor library for optimizing machine learning models is related to errors in processing input data. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...
The vulnerability of the access control and working time recording system within SIPORT is related to the improper assignment of permissions for critical resources, allowing intruders to increase their privileges.
The vulnerability of the access control and working time recording system within SIPORT is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of Google Chrome’s Blink rendering module allows a hacker to replace the user interface.
The vulnerability of Google Chrome’s Blink rendering module is related to improper implementation. Exploiting this vulnerability allows a remote attacker to replace the user interface with a specially created HTML page...
The vulnerability of microprogrammed communication module software of SIMATIC CP 1543-1, related to incorrect authorization, allows a intruder to circumvent existing security restrictions.
The vulnerability of the microprogramming software for the SIMATIC CP 1543-1 communication modules is related to incorrect authorization. Exploiting this vulnerability can allow an attacker, operating remotely, to circumvent existing security restrictions...
The vulnerability of the udc component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the udc component in the Linux operating system’s kernel is related to improper locking of resources in the usbepqueue function. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of GigaDevice’s GD32 microprogrammed software controllers, models GD32E23x and GD32E50x, is related to access control deficiencies. This vulnerability allows attackers to read data from SRAM or alter its state.
The vulnerability of GigaDevice’s GD32 microprogrammed device controllers, such as GD32E23x and GD32E50x, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to read data from SRAM or alter its state...
The vulnerability of the Windows DWM library in Windows operating systems, related to the swapping of a non-trusted pointer, allows attackers to escalate their privileges.
The vulnerability of the Windows DWM library in Windows operating systems is related to the swapping of a non-trusted pointer. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the use of a regular expression c with inefficient computational complexity, allowing a hacker to trigger a service failure.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures whe...
The vulnerability of the Portal for ArcGIS web portal involves incorrect elimination of special elements in the output data used by the incoming component. This allows a malicious user to execute arbitrary HTML code.
The vulnerability of the Portal for ArcGIS web portal is related to incorrect neutralization of special elements in the output data used by the incoming component. Exploiting this vulnerability allows a malicious actor to execute arbitrary HTML code remotely...
The vulnerability of the DevTools suite for web development in Microsoft Edge and Google Chrome browsers allows a hacker to execute arbitrary code.
The vulnerability of the DevTools suite for web development in Microsoft Edge and Google Chrome is related to insufficient testing of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created HTML page from a remote location...
The vulnerability of the YouGile project management service, related to insufficient protection of operational data, allows a hacker to disclose the protected information.
The vulnerability of the YouGile project management service is related to insufficient protection of operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...
The vulnerability of the __nss_database_lookup component in the Virtuoso-opensource web application development platform allows a attacker to trigger a service failure.
The vulnerability of the nssdatabaselookup component in the Virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially create...
The vulnerability of the SAP Commerce Cloud e-commerce platform, related to insufficient protection of sensitive data, allows attackers to disclose protected information.
The vulnerability of the SAP Commerce Cloud e-commerce platform is related to insufficient protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
The library’s vulnerability in converting files to the base64 format for uploading files to the Angular Base64 Upload web application, allowing a hacker to execute arbitrary code.
The vulnerability of the library for converting files to the base64 format, which is used to upload files to the web application’s server, relates to an incorrect restriction on the path name of the restricted directory. Exploiting this vulnerability could allow a malicious actor to execute...
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the use of an insecure search path, allowing a perpetrator to execute arbitrary code.
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the use of an insecure search path. Exploiting this vulnerability allows an attacker to execute arbitrary code...