98239 matches found
Microsoft Office Code Execution
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, Microsoft SharePoint, Microsoft Excel, and Microsoft Office Web Apps Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to execute arbitrary code...
ated_tp Code Execution
The vulnerability of TP-Link TL-WR841N router’s atedtp microprogramming system lies in insufficient validation of the string entered by the user before it is used to execute system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
JFS Heap Buffer Overflow DoS
The vulnerability of the diFree function fs/jfs/inode.c in the Journaled File System JFS of the Linux operating system is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...
Trend Micro HouseCall Privilege Escalation
The vulnerability of the Trend Micro HouseCall antivirus protection tool relates to the improper assignment of privileges. Exploiting this vulnerability can allow a remote attacker to increase their privileges...
Infrastructure Component DoS
The vulnerability of Oracle Banking Trade Finance software’s Infrastructure component exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
Device Software Manager Installer Arbitrary File Load
The vulnerability of the Device Software Manager installer is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a hacker to load arbitrary files...
Oracle FLEXCUBE Universal Banking Simulation Model Data Read Modify
The vulnerability of the Infrastructure sub-component of the Oracle FLEXCUBE Universal Banking banking analytics system’s simulation model exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify...
Cognex 3D-A1000 Dimensioning System Arbitrary Log Creation
The vulnerability of the microprogramming software of the Cognex 3D-A1000 Dimensioning System is related to incorrect processing of output data for registration logs. Exploiting this vulnerability allows a malicious actor to create arbitrary log files remotely...
Cisco Small Business RV110W Router Arbitrary Command Execution
The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV110W, RV130, RV130W, and RV215W arises from the copying of buffers without checking the size of the input data during the processing of user fields in incoming HTTP packets. Exploiting...
Cisco Small Business RV110W Router Arbitrary Command Execution
The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV110W, RV130, RV130W, and RV215W arises from the copying of buffers without checking the size of the input data during the processing of user fields in incoming HTTP packets. Exploiting...
Microsoft Visual Studio .NET Framework Resource Leak DoS
The vulnerability of the Microsoft Visual Studio software development tool and the Microsoft.NET Framework software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
lib9p FreeBSD Code Execution
The vulnerability of the lib9p library in FreeBSD operating systems is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Linux Kernel User Namespace Handler Root Access
The vulnerability of the nftseteleminit function in the net/netfilter/nftablesapi.c file of the User Namespace Handler component in the Linux operating system kernel is caused by a buffer overflow. Exploiting this vulnerability could allow a remote attacker to gain root access...
OGG Core Library Full Control
The vulnerability of the OGG Core Library, a data stream management tool of Oracle GoldenGate, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...
Infrastructure Oracle FLEXCUBE Universal Banking System Data Reading DoS
The vulnerability of the Infrastructure component of the Oracle FLEXCUBE Universal Banking system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain read access to data or cause partial service interruption...
Navigation Pages
The vulnerability of the Navigation Pages, Portal, and Query components in Oracle PeopleSoft Enterprise PeopleTools exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to data or modify data using HTTP reques...
Siemens TFTP-server Buffer Overflow Information Disclosure
The vulnerability of the TFTP server implementation for Siemens’ software and software-hardware products lies in the fact that the operation is carried out outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to gain access to protected information by sending...
Connected Components Workbench Privilege Escalation
The vulnerability of the software used for designing and configuring the Connected Components Workbench CCW from Rockwell Automation is related to an incorrect limitation on the path to the restricted-access catalog. Exploiting this vulnerability could allow a attacker to increase their privilege...
NETGEAR Router Command Injection
The vulnerability of the embedded software of NETGEAR routers such as RBR20, RBR40, RBR50, RBS20, RBS40, RBR50, RBK20, RBK40, and RBK50 lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...
NETGEAR RAX43 Web Interface Data Compromise
The vulnerability of the web interface of NETGEAR RAX43 router software relates to the transmission of data in an open manner. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information through HTTP requests...
Adobe Premiere Elements Buffer Overflow
The vulnerability of Adobe Premiere Elements software-related video editing programs lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...
Microsoft Windows Defender operating Unauthorized Access
The vulnerability of Microsoft Windows Defender operating systems is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
Adobe XMP-Toolkit-SDK Code Execution
The vulnerability of the software for creating metadata, processing, and exchanging standard sets within the Adobe XMP-Toolkit-SDK is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user,...
QUSBCam2 Deployment Application Heap Buffer Overflow
The vulnerability of the deployment application for the QUSBCam2 monitoring system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
datatables.net Code Execution
The vulnerability of the datatables.net package’s DataTables library is related to insufficient control over modifications to dynamically defined object properties. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures...
DwaCompressor Component Uncontrolled Resource Consumption DoS
The vulnerability of the DwaCompressor component of the image storage software for OpenEXR files, which supports a wide dynamic range of brightness levels, is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
Microsoft Edge Security Bypass
The vulnerability of Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...
Visual Studio Code Privilege Escalation
The vulnerability of Visual Studio Code’s source editor is related to the insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges...
VMI web interface Privilege Escalation
The vulnerability in the VCenter Server Management Interface of the VMware vCenter Server web interface relates to deficiencies in system security restrictions. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information by sending a specially crafte...
PDF Memory Management Data Compromise
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is released. Exploiting the...
Telerik Web UI DLL Encryption Key
The vulnerability of the Telerik.Web.UI.dll library of the Telerik UI software for ASP.NET AJAX and the Sitefinity web content management system is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to disclose encryption keys...
FortiMail Webmail Unauthorized Access
The vulnerability of FortiMail’s webmail system relates to deficiencies in the checking of path names to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information through specially crafted web requests...
ImageMagick ScaleAnyToQuantum Function DoS
The vulnerability of the ScaleAnyToQuantum function in the /MagickCore/quantum-private.h file of the ImageMagick console graphics editor involves integer overflow. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...
Firefox requestPointerLock setTimeout Unauthorized Access
The vulnerabilities of the requestPointerLock and setTimeout methods in Firefox browsers stem from synchronization errors when using shared resources. Exploiting these vulnerabilities can allow an attacker to gain unauthorized access to protected information...
JunOS Privilege Escalation
The vulnerability of JunOS operating systems’ routers, such as SRX1500, SRX4100, SRX4200, SRX4600, and SRX5000 with SPC2, SRX5000 with SPC2/SPC3, and vSRX, is related to privilege management errors. Exploiting this vulnerability can allow attackers to increase their privileges...
Apache OFBiz Resource Planning Code Execution
The vulnerability of Apache OFBiz’s resource planning software lies in its ability to restore unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted request...
SonicWall Email Security Hosted Email Security Unrestricted File Download
The vulnerability of SonicWall Email Security and SonicWall Hosted Email Security software lies in their ability to allow unlimited download of malicious files. Exploiting this vulnerability can enable a malicious actor to compromise the confidentiality, integrity, and accessibility of the...
Cisco Firepower Threat Defense CLI Reboot DoS
The vulnerability of the command-line interface CLI of Cisco Firepower Threat Defense FTD microprogramming systems relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to trigger a system reboot or cause a service failure...
Cisco RV110W Wireless-N VPN Firewalls Router Interface Code Execution
The vulnerability in the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN routers, RV130W Wireless-N Multifunction VPN, and RV215W Wireless-N VPN web management interfaces relates to the execution of arbitrary code outside the buffer boundaries of memory. Exploiting this vulnerability allows a...
docker daemon Resource Consumption DoS
The vulnerability of the dockerd daemon, a tool for automating the deployment and management of applications in Docker containerized environments, is related to improper handling of the image manifest file. Exploiting this vulnerability allows an attacker to cause service interruptions...
Windows Privilege Escalation
The vulnerability of the Windows Container Execution Agent component of the operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Microsoft Visual Studio Code ESLint Extension Code Execution
The vulnerability of the Microsoft Visual Studio Code ESLint Extension lies in the lack of protection for service data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Linux C Library Directory Access Confidential Data Compromise
The vulnerability of the math/i386/ library directory in the C language for Linux operating systems is related to a imbalance in the configuration of the floating-point stack. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and...
ImageMagick Buffer Overflow
The vulnerability in the MagickCore/quantum-private.h file of the console-based image editing tool ImageMagick is caused by buffer overflow. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...
Apache Kafka Connect Workers Unauthorized Access
The vulnerability of the Connect workers component in the Apache Kafka messaging broker is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
Cisco AnyConnect Secure Mobility Client Process Interaction DoS
The vulnerability of the process-interaction channel of the Cisco AnyConnect Secure Mobility Client cryptographic security tool is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
Bluetooth Service Privilege Escalation
The vulnerability of the Bluetooth service for Windows operating systems is related to authentication errors. Exploiting this vulnerability can allow an attacker to increase their privileges and gain unauthorized access to protected information...
Search Integration Engine component Unauthorized Access
The vulnerability of the Search Integration Engine component of the Oracle E-Business Suite Secure Enterprise Search product is related to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to read, modify,...
Kryo Codec Code Execution
The vulnerability of the Kryo Codec component in the software platform for integrating corporate applications in Spring Integration is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Windows Backup Service Privilege Escalation
The vulnerability of the Windows Backup Service in Microsoft Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...