FortiOS CRLF Injection

The vulnerability of the FortiOS operating system is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTTP headers...

bitrix/templates/bitrix24/components/bitrix/menu/left_vertical/script.js Arbitrary

The vulnerability of the component bitrix/templates/bitrix24/components/bitrix/menu/leftvertical/script.js, which is part of the main service for managing Bitrix24, relates to uncontrolled changes to prototype object attributes. Exploiting this vulnerability could allow an attacker to execute...

Bitrix24 Code Execution

The vulnerability of the bitrix/modules/main/classes/general/useroptions.php file in the Bitrix24 business management module is related to improper external manipulation of the file’s name or path. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and...

Juniper Networks’ Junos OS Connectivity Fault Management DoS

The vulnerability of the Connectivity Fault Management CFM function in Juniper Networks’ Junos OS routers of the MX series is related to incorrect checking of the specified index, position, or offset in input data. Exploiting this vulnerability can allow a malicious actor to cause service...

JeecgBoot SQL Injection

The vulnerability of the JeecgBoot development platform lies in the lack of measures taken to protect the SQL query structure during the processing of the id parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

Siemens Solid Edge Buffer Overflow

The vulnerability of Siemens Solid Edge’s design and simulation tools is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to execute arbitrary code using specially created PAR files...

Juniper Networks Routing Protocol Demon DoS

The vulnerability of the Routing Protocol Data RPD in Juniper Networks’ Junos OS and Juniper Networks’ Junos OS Evolved operating systems is related to the use of an uninitialized variable. Exploiting this vulnerability can allow attackers to cause service failures...

Kibana Data Visualization Service Unauthorized Access

The vulnerability of the Kibana data visualization service is related to insufficient protection of registration data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to registration data...

Samba Buffer Overflow DoS

The vulnerability of the Samba networking communication package is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

BIG-IP Access Control Remote Authentication Command Execution

The vulnerability of the BIG-IP access control and remote authentication configuration tool lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Google Chrome Downloads Spear Phishing

The vulnerability of the Downloads component of the Google Chrome browser is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...

MELSEC-F Authentication Breach

The vulnerability of MELSEC-F programmable logic controllers’ microprogramming software is related to authentication breaches. Exploiting this vulnerability allows an attacker, operating remotely, to circumvent existing security restrictions...

Reciply Plugin Code Execution

The vulnerability of the uploadImage.php file of the Reciply plugin in the WordPress content management system involves unlimited downloading of dangerous files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

WireGuard VPN Block IP Traffic

The vulnerability of the VPN service WireGuard is related to errors in handling links. Exploiting this vulnerability allows a remote attacker to block IP traffic on selected IP addresses...

Asset Suite EAM SSO Access Bypass

The vulnerability of the Single Sign-On SSO implementation for managing enterprise asset management in the energy sector, Asset Suite EAM, is related to deficiencies in authentication procedures due to incorrect password input. Exploiting this vulnerability can allow unauthorized users to bypass...

PDF-XChange Editor Buffer Overflow

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created JPG file...

Google Chrome User Interface Replacement

The vulnerability of Google Chrome’s user tabs is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially created HTML page...

Argo CD Pathname Restriction Unauthorized Access

The vulnerability of GitOps’ continuous delivery tool for Kubernetes Argo CD is related to shortcomings in pathname restrictions for directories. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

free_stream Memory Reclamation DoS

The vulnerability of the freestream function in the file conversion utility for files with the .fig and .fig2dev extensions is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Crucible Fisheye Operational Data Access

The vulnerability of the Crucible code-checking tool and the Fisheye code-searching tool is related to insufficient protection for service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

SAP BW BI Consumer Service Unauthorized Access

The vulnerability of the SAP BW BI Consumer Service BICS module, which is part of the SAP Business Warehouse and SAP BW/4HANA data management and analytics systems, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain...

Open Babel coord_file Code Execution

The vulnerability of the pFormat function in the software for converting chemical substance formats in Open Babel is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

SAP Enable Now XSS

The vulnerability of the SAP Enable Now program for creating and managing training materials is related to the absence of a X-Content-Type-Options header. Exploiting this vulnerability could allow attackers to carry out XSS attacks remotely...

ASD service RCE

The vulnerability of the ASD service of the IQ Engine HiveOS wireless access point operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges and execute arbitrary code...

macOS Kernel Bypass Access

The vulnerability of the macOS operating system’s kernel is related to security configuration errors. Exploiting this vulnerability can allow an attacker to bypass security restrictions and gain unauthorized access to protected information...

Base plugin Gstreamer Code Execution

The vulnerability of the Base plugin gst-plugins-base of the Gstreamer multimedia framework is related to the issue where operations occur outside the buffer boundaries in memory during the parsing and decoding of SRT subtitle files. Exploiting this vulnerability allows a remote attacker to execu...

Microsoft Visual Studio Code Extension Code Execution

The vulnerability of the editor extension for Microsoft Visual Studio Code’s GitHub Pull Requests and Issues extension is related to errors in processing input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Linux kernel netfilter Heap Buffer Overflow Privilege Escalation

The vulnerability of the nftchainlookupbyid function in the net/netfilter/nftablesapi.c module of the Linux kernel’s packet filtering subsystem is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker t...

ConnMan client.c DoS

The vulnerability in the client.c component of the ConnMan driver is related to buffer overflow attacks. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Linux kernel BPF verifier Heap Buffer Overflow DoS

The vulnerability of the backtrackinsn function in the kernel/bpf/verifier.c module of the Linux operating system is related to calls outside of the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Horner Automation Cscape Buffer Overflow Code Execution

The vulnerability of the Horner Automation Cscape software lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by allowing the user to open a specially created FNT file...

ApexOne Security Agent Privilege Escalation

The vulnerability of the ApexOne Security Agent in antivirus software programs Trend Micro Apex One and Apex One as a Service is related to the use of an insecure search path. Exploiting this vulnerability allows a attacker to enhance their privileges and execute arbitrary code...

ShareFile StorageZones Access Control

The vulnerability of ShareFile StorageZones relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full access to the controller...

ABB eSOMS Unauthorized Access

The vulnerability of the ABB eSOMS production process management software is related to errors in the Cache-Control and Pragma headers of HTTP responses. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Core component Oracle Health Sciences InForm DoS Data Access

The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures or gain access to read, modify, add, or delete data...

Netgear SRX5308 Router XSS

The vulnerability in the web interface of Netgear’s SRX5308 router software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack by sending a specially crafted HTTP request...

Delta Electronics InfraSuite Device Master Privilege Escalation

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to the improper installation of the catalog resolution. Exploiting this vulnerability can allow attackers to enhance their privileges...

Cisco IOS XE DoS

The vulnerability of the HTTP-based client profiling function in Cisco IOS XE exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Cisco Small Business Router XSS

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform...

GOT Mobile Graphic Control Panel Unauthorized Access

The vulnerability of the GOT Mobile function implementation in Mitsubishi Electric’s GOT2000 series graphic control panels, models GT27 and GT25, as well as the HMI platform GT SoftGOT2000, involves bypassing authentication through spoofing. Exploiting this vulnerability can allow unauthorized...

Zyxel 5G NR/4G LTE CPE Router Buffer Overflow DoS

The vulnerability of the Zyxel CGI router’s 5G NR/4G LTE CPE lies in buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted HTTP requests remotely...

D-Link Wireless Access Point Code Execution

The vulnerability of the WEBDisplayPage function in D-Link’s wireless access points DAP-2020 and DAP-1360 is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Oracle Access Manager Authentication Engine Unauthorized Access

The vulnerability of the Authentication Engine component in the Oracle Access Manager access control system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Cortex XDR Agent DoS

The vulnerability of the Cortex XDR Agent, which is responsible for network traffic analysis, network detection, and response, is related to code errors. Exploiting this vulnerability can allow attackers to cause system services under Windows to fail...

Boa CGI Wapopen Unauthorized Access

The vulnerability in the /cgi-bin/wapopen HTTP-server implementation of Boa is related to incorrect restrictions on the path to the restricted directory during processing of the FILECAMERA variable. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected...

XRDP Heap Buffer Overflow DoS

The vulnerability of the xrdpcapsprocessconfirm-active function on the XRDP server is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information or cause servic...

D-Link DIR-882 Code Execution

The vulnerability of the websRedirect function in D-Link DIR-882 wireless router software is related to buffer overflow vulnerabilities. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

IpSecDxe.efi Confidential Data Access

The vulnerability of the IpSecDxe.efi component in the open-source UEFI EDK2 development environment is related to pointer swapping errors. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

Windows Scripting Languages Code Execution

The vulnerability of the Windows Scripting Languages component of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Office for Mac Unauthorized Access

The vulnerability of the Microsoft Office for Mac software is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...