The vulnerability of Microsoft Windows Defender operating systems, which allows attackers to increase their privileges

The vulnerability of Microsoft Windows Defender operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of FortiWeb web applications’ network firewalls arises from improper processing of output data for registration logs, allowing attackers to replace the traffic logs.

The vulnerability of FortiWeb web applications’ network firewalls is related to improper processing of output data for registration logs. Exploiting this vulnerability allows a malicious actor to replace traffic logs through a specially created web page...

The vulnerability of Google Chrome’s WebRTC technology allows a perpetrator to execute arbitrary code or trigger a service failure.

The vulnerability of Google Chrome’s WebRTC technology is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure through a specially created malicious web page...

The vulnerability of the Flat PM Plugin plugin in the WordPress content management system, which exists due to the lack of measures taken to protect the website’s structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Flat PM Plugin in the WordPress content management system exists due to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to carry out cross-site scripting attacks remotely...

The vulnerability of Blink’s web page rendering mechanism in Google Chrome browser allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially created malicious web page...

The vulnerability of the command shell of ZySH microprogramming software for network devices such as ZyXEL USG FLEX and ATP allows a hacker to alter the URL address of the registration page.

The vulnerability of the command shell of the ZySH microprogramming software for ZyXEL USG FLEX, VPN, and ATP is related to deficiencies in access control. Exploiting this vulnerability could allow a attacker to alter the URL address of the registration page through the web interface...

The vulnerability of distributed computing platforms and PowerJob task scheduling systems, related to incorrect default permissions, allows attackers to gain unauthorized access to protected information.

The vulnerability of distributed computing platforms and the PowerJob task scheduling system is related to incorrect default permissions. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the SerializationTypeConverter class in the Microsoft Exchange Server mail server allows attackers to perform spoofing attacks.

The vulnerability of the SerializationTypeConverter class in Microsoft Exchange Server lies in the deserialization mechanism’s deficiencies, resulting from insufficient protection of service data. Exploiting this vulnerability allows attackers to perform spoofing attacks remotely...

The vulnerability of the elf32-i386.c and elf64-x86-64.c components of the GNU Binutils development environment allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the elf32-i386.c and elf64-x86-64.c components of the GNU Binutils development environment is related to integer overflow. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a...

The vulnerability in the `bitrix/modules/main/classes/general/user_options.php` file of the `main` module of the Bitrix24 business management service allows a hacker to execute arbitrary code and gain increased privileges.

The vulnerability of the bitrix/modules/main/classes/general/useroptions.php file in the Bitrix24 business management module is related to improper external manipulation of the file’s name or path. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and...

The vulnerability of the WebApp Provider component of Google Chrome allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Google Chrome browser’s WebApp Provider component is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially...

The vulnerability of the Clario VPN service lies in the lack of protection for transmitted data, allowing a hacker to send arbitrary IP traffic as plain text beyond the VPN tunnel.

The vulnerability of the Clario VPN client relates to the lack of protection for transmitted data. Exploiting this vulnerability allows a hacker to send arbitrary IP traffic as plain text beyond the VPN tunnel...

The vulnerability of the Packet Forwarding Engine (PFE) module of Juniper Networks’ Junos OS allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the JPEG component of MediaTek’s microprogramming software allows attackers to gain access to confidential information.

The vulnerability of the JPEG component of MediaTek’s microprogramming software relates to reading data outside the buffer in memory. Exploiting this vulnerability could allow an attacker to access confidential information...

The vulnerability of the conf_mail.php component in the microprogramming software for solar power generation, data display, and storage of SolarView Compact allows a hacker to execute arbitrary commands.

The vulnerability of the confmail.php component in the microprogramming software for solar power measurement, data display, and storage in SolarView Compact exists due to the lack of measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability can...

The vulnerability of the websGetVar function in the D-Link DIR-619L router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability of the websGetVar function in the D-Link DIR-619L router’s microprogramming system is related to the writing of data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...

The vulnerability of the Redis database management system lies in the insecure management of privileges, allowing attackers to gain unauthorized access to keys that are clearly not authorized by the ACL configuration.

The vulnerability of the Redis database management system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to keys that are clearly not authorized by the ACL configuration...

The vulnerability of the nft_set_catchallFlush() function in the net/netfilter/nf_tables_api.c module of the Linux kernel’s netfilter component allows a attacker to access protected information or cause a service failure.

The vulnerability of the nftsetcatchallFlush function in the net/netfilter/nftablesapi.c module of the Linux kernel’s netfilter component is related to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to access protected information or cause...

The vulnerability of the Citrix Workspace App for Linux operating system, related to access control deficiencies, allows a intruder to gain access to user sessions.

The vulnerability of the Citrix Workspace App for Linux operating system is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to gain access to user sessions...

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow lies in the use of a regular expression with inefficient computational complexity, allowing attackers to trigger service failures.

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service...

The vulnerability of the web interface of the microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the web interface of the microprogramming software for routing and switching platforms RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 is related to the use of an unreliable cryptographic algorithm. Exploiting this vulnerability can allow an unauthorize...

The vulnerability of the Avahi service detection system in local networks, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Avahi service detection system in local networks is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a perpetrator to cause service failures...

The vulnerability of the WebXR WebRTC component in Google Chrome, related to the use of memory after its release, allows a hacker to execute arbitrary code.

The vulnerability of the WebXR component in Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Windows command-line interpreter allows a hacker to execute arbitrary code.

The vulnerability of the Windows command-line interpreter arises from the lack of mechanisms to stop the execution of a script after an error is detected in it. Exploiting this vulnerability allows an attacker to execute arbitrary code by creating images using the built-in graphics editor MS Pain...

The vulnerability of the Honeywell OneWireless Wireless Device Manager (WDM) lies in the lack of measures taken to clean data at the control level, allowing attackers to execute arbitrary commands.

The vulnerability of the Honeywell OneWireless Wireless Device Manager WDM lies in the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the PnPSCADA automation system’s software lies in the lack of protective measures for SQL query structures. This allows attackers to gain unauthorized access to protected information and compromise the system.

The vulnerability of the PnPSCADA automation system’s software is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information and compromise the system...

The vulnerability of the sub_48AC20 function in D-Link DIR-882 A1 wireless router’s microprogramming software allows for the execution of arbitrary code.

The vulnerability of the sub48AC20 function in D-Link DIR-882 A1 wireless router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the CN2600 terminal server’s microprogramming software, related to the use of cryptographic algorithms containing defects, allows a hacker to compromise the connection and gain access to protected information.

The vulnerability of the microprogramming software of the terminal server CN2600 is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability can allow a malicious actor to compromise the connection and gain access to protected information...

The vulnerability of the monitoring tool for VMware Aria Operations, related to deficiencies in the deserialization mechanism, allows a perpetrator to execute arbitrary code.

The vulnerability of the monitoring tool for VMware Aria Operations is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the ftusbbus2.sys driver, a component of the IoControlCode utility in FabulaTech USB for Remote Desktop, allows a malicious actor to cause a service failure.

The vulnerability of the ftusbbus2.sys driver, a component of the IoControlCode utility in FabulaTech USB for Remote Desktop, is related to pointer assignment errors. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the Substance 3D Stager software lies in its susceptibility to buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of the Substance 3D Stager software lies in the overflow of memory buffer in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of the MKLogic-500 PLC configuration protocol, related to the lack of authentication for critical functions, allows attackers to alter the device’s operating logic.

The vulnerability of the MKLogic-500 PLC configuration protocol lies in the absence of authentication for a critical function. Exploiting this vulnerability allows an attacker, operating remotely, to alter the device’s operating logic...

The vulnerability in the `swift/common/middleware/s3api/etree.py` file of the S3 API interface for distributed object storage systems allows a perpetrator to gain unauthorized access to read any arbitrary files.

The vulnerability in the swift/common/middleware/s3api/etree.py file of the S3 API interface for distributed object storage systems in Swift is related to the use of files and directories accessible to external parties. Exploiting this vulnerability could allow an attacker to gain unauthorized...

The vulnerability of Microsoft’s .NET Framework and .NET software platforms lies in the insufficient protection of operational data during code debugging, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft .NET Framework and .NET software platforms is related to insufficient protection of sensitive data during code debugging. Exploiting this vulnerability can allow attackers to execute arbitrary code...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the ability to write code beyond the buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the current user...

The vulnerability of the Adobe Framemaker desktop publishing system, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Framemaker desktop publishing system lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

The vulnerability of the component responsible for creating new account records in the Apex-VUZ education automation system allows a perpetrator to cause service interruptions.

The vulnerability of the component responsible for creating new account records in the Apex-VUZ automation system is related to improper control of the interaction frequency. Exploiting this vulnerability allows a malicious actor to trigger a service failure by sending specially crafted POST...

The vulnerability of the library for working with X Pixmap (XPM) files, libXpm, is related to insecure search paths, allowing attackers to execute arbitrary code with elevated privileges.

The vulnerability of the library for working with X Pixmap XPM files involves the use of the $PATH variable to execute commands responsible for unpacking .Z or .gz files. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges...

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code with SYSTEM privileges...

The vulnerability of the command-line interface of microprogramming software for Cisco SD-WAN vBond Orchestrator, Cisco SD-WAN vEdge Cloud Routers, Cisco SD-WAN vEdge Routers, Cisco SD-WAN vSmart Controller, and the centralized network management system Cisco SD-WAN vManage arises from incorrect path name restrictions related to restricted access directories. This vulnerability allows attackers to create or re-record critical files.

The vulnerability of the command-line interface of microprogramming software for Cisco SD-WAN vBond Orchestrator, Cisco SD-WAN vEdge Cloud Routers, Cisco SD-WAN vEdge Routers, Cisco SD-WAN vSmart Controller, and the centralized network management system Cisco SD-WAN vManage is related to an...

The vulnerability of the `__do_proc_dointvec` function in the Linux operating system’s kernel allows a hacker to cause a service failure or enhance their privileges.

The vulnerability of the doprocdointvec function in the Linux operating system’s kernel is related to the use of functions with non-standard implementations. Exploiting this vulnerability can allow an attacker to cause service failures or increase their privileges...

The vulnerability in the driver drivers/usb/mon/mon_bin.c of Linux operating systems allows a hacker to execute arbitrary code.

The vulnerability in the driver drivers/usb/mon/monbin.c of Linux operating systems arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Linux operating system’s kernel, which allows a hacker to trigger a service failure

The vulnerability of Linux operating system kernels relates to how it handled the I2CSMBUSBLOCKPROCCALL scenario via the ioctl I2CSMBUS with malicious input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the httpd daemon in the embedded software of the NETGEAR R7000P router allows a hacker to execute arbitrary code.

The vulnerability of the httpd daemon in the NETGEAR R7000P router’s embedded software is related to buffer overflow errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through the wandns1sec parameter...

The vulnerability of Websoft HCM’s automation software for HR processes stems from the lack of measures taken to protect the website structure. This allows attackers to carry out XSS attacks.

The vulnerability of Websoft HCM’s HR automation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of NSD and Unbound DNS servers lies in the improper handling of symbolic links before accessing a file. This allows attackers to cause service failures.

The vulnerability of NSD and Unbound DNS servers is related to the incorrect handling of symbolic links before accessing a file. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the Indirect Branch Prediction Barrier (IBPB) implementation in AMD microprogramming software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Indirect Branch Prediction Barrier IBPB implementation in AMD microprocessors is related to improper cleaning of the RAS stack. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a secondary channel...

The vulnerability of the Home Network Administration Protocol (HNAP) implementation in D-Link DIR-1935 router microsoftware allows a hacker to circumvent security restrictions.

The vulnerability of the Home Network Administration Protocol HNAP implementation in D-Link DIR-1935 router microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions remotely...

The vulnerability of the Microsoft DWM Core Library on Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Microsoft DWM Core Library on Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Moxa MXView network control software lies in its lack of functionality for checking the path name of the restricted access directory. This allows a violator to execute arbitrary code.

The vulnerability of the Moxa MXView network control software is related to deficiencies in checking the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...