Apache OFBiz Resource Planning Code Execution

The vulnerability of Apache OFBiz’s resource planning software lies in its ability to restore unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted request...

SonicWall Email Security Hosted Email Security Unrestricted File Download

The vulnerability of SonicWall Email Security and SonicWall Hosted Email Security software lies in their ability to allow unlimited download of malicious files. Exploiting this vulnerability can enable a malicious actor to compromise the confidentiality, integrity, and accessibility of the...

Cisco Firepower Threat Defense CLI Reboot DoS

The vulnerability of the command-line interface CLI of Cisco Firepower Threat Defense FTD microprogramming systems relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to trigger a system reboot or cause a service failure...

Cisco RV110W Wireless-N VPN Firewalls Router Interface Code Execution

The vulnerability in the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN routers, RV130W Wireless-N Multifunction VPN, and RV215W Wireless-N VPN web management interfaces relates to the execution of arbitrary code outside the buffer boundaries of memory. Exploiting this vulnerability allows a...

docker daemon Resource Consumption DoS

The vulnerability of the dockerd daemon, a tool for automating the deployment and management of applications in Docker containerized environments, is related to improper handling of the image manifest file. Exploiting this vulnerability allows an attacker to cause service interruptions...

Windows Privilege Escalation

The vulnerability of the Windows Container Execution Agent component of the operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Microsoft Visual Studio Code ESLint Extension Code Execution

The vulnerability of the Microsoft Visual Studio Code ESLint Extension lies in the lack of protection for service data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Linux C Library Directory Access Confidential Data Compromise

The vulnerability of the math/i386/ library directory in the C language for Linux operating systems is related to a imbalance in the configuration of the floating-point stack. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and...

ImageMagick Buffer Overflow

The vulnerability in the MagickCore/quantum-private.h file of the console-based image editing tool ImageMagick is caused by buffer overflow. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

Apache Kafka Connect Workers Unauthorized Access

The vulnerability of the Connect workers component in the Apache Kafka messaging broker is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

Kryo Codec Code Execution

The vulnerability of the Kryo Codec component in the software platform for integrating corporate applications in Spring Integration is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Windows Backup Service Privilege Escalation

The vulnerability of the Windows Backup Service in Microsoft Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft Graphics Components Code Execution

The vulnerability of Microsoft Graphics Components in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Sample apps Oracle WebLogic Server Unauthorized Access

The vulnerability of the Sample apps component of the Oracle WebLogic Server application server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Windows GDI Information Disclosure

The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

MpSigStub.exe File Deletion

The vulnerability of the MpSigStub.exe executable file of Microsoft’s Windows Defender is related to privilege management errors. Exploiting this vulnerability could allow a malicious actor to delete files in certain parts of the file system remotely...

Windows font library Code Execution

The vulnerability of the Windows operating system’s font library is related to incorrect handling of fonts. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

LuCI Configuration Interface Inter-site Request Manipulation

The vulnerability of the LuCI configuration web interface in the embedded operating system OpenWrt exists due to the improper functioning of the mechanism for protecting the web page structure. Exploiting this vulnerability allows a malicious actor to manipulate inter-site requests using certain...

Microsoft JET Database Engine Code Execution

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Cisco SD-WAN vManage SQL Injection

The vulnerability in the vManage web interface of the Cisco SD-WAN programmatically defined network is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

Google Chrome SwiftShader Buffer Overflow

The vulnerability of Google Chrome’s high-performance rendering system, SwiftShader, is related to object lifecycle errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

Google Chrome Confidential Data Access

The vulnerability of Google Chrome is related to incorrect configuration of security policies. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data through a specially created HTML page...

SharePoint Server XSS

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially create...

Django HTMLParser DoS

The vulnerability of the HTMLParser module in django.utils.html.striptags of the Django web development framework is related to a slow evaluation of large input data, which contain large sequences of incomplete HTML objects. Exploiting this vulnerability may allow an attacker to cause service...

Google Chrome Download Manager Data Compromise

The vulnerability of Google Chrome web browser’s download manager is related to the use of freed memory segments. Exploiting this vulnerability can allow an attacker to compromise data integrity, cause service failures, or gain unauthorized access to confidential information through a specially...

Junos OS Broadband Edge Service DoS

The vulnerability of the Broadband Edge service on Junos OS routers of the MX Series exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

libzypp Unauthenticated Information Disclosure

The vulnerability of the libzypp library in SUSE CaaS Platform and SUSE Linux Enterprise Server software is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information...

Enterprise Manager Base Platform Privilege Escalation

The vulnerability of the Extensibility Framework component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected...

Odoo Community Edition Privilege Escalation

The vulnerability of the CRM system Odoo Community Edition and the ERP system Odoo Enterprise Edition is related to errors in processing non-saved calculated fields by the superuser. Exploiting this vulnerability can allow an attacker to enhance their privileges within the target system by sendin...

Cisco Data Center Network Manager SOAP API Disclosure Sensitive Information

The vulnerability of the SOAP API interface of the Cisco Data Center Network Manager DCNM system is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

SQLite exprListAppendList Heap Buffer Overflow DoS

The vulnerability of the exprListAppendList function in the SQLite database management system arises from the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Oracle WebLogic Server Web Container JavaServer Faces Information Disclosure

The vulnerability of the Web Container JavaServer Faces component of the Oracle WebLogic Server application server is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information using the HTTP...

D-Link Router Code Execution

The vulnerability of D-Link DIR-655, D-Link DIR-866L, D-Link DIR-652, and D-Link DHP-1565 router microprogramming software is related to insufficient testing of the arguments passed in the command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a...

Advantech WebAccess Privilege Escalation

The vulnerability of Advantech WebAccess remote monitoring software relates to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges and gain access to files...

Remote Desktop Services RCE

The vulnerability of Remote Desktop Services RDS for Windows operating systems arises due to errors in checking RDS service requests during RDP protocol connections. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted requests to the RDS...

Jenkins Script Security Code Execution

The vulnerability of the Jenkins Script Security plugin is related to data processing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

FortiOS Web Interface Cookie Bypass

The vulnerability in the FortiOS operating system’s web interface is related to the absence of the necessary encryption step. Exploiting this vulnerability allows a malicious actor to bypass the verification of the “APSCOOKIE” cookie parameter, which is used to protect information transmitted via...

FortiSIEM XSS

The vulnerability of the FortiSIEM security management portal is related to the disclosure of the unencrypted LDAP server password. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scripting attack remotely...

Oracle VM VirtualBox Component Freeze

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause the system to become unresponsive or partially fail to operate...

Oracle Solaris Common Desktop Environment Full Control

The vulnerability of the Common Desktop Environment component in Oracle Solaris systems is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain full control over the application...

Keepalived extract_status_code Buffer Overflow DoS

The vulnerability of the extractstatuscode function in the keepalived network traffic balancing system’s lib/html.c file is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Microsoft SharePoint Access Control XSS

The vulnerability of Microsoft SharePoint Foundation and the Microsoft SharePoint Server software suite is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks and increase their privileges by using a specially...

Oracle VM VirtualBox Core Unauthorized Access

The vulnerability of the Core component of Oracle VM VirtualBox is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

Oracle MySQL Server Partitioning Unauthorized Access

Vulnerability of the Server component: The Oracle MySQL Server database management system’s partitioning scheme is vulnerable due to lack of access control mechanisms. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected data or cause service failures...

Office Memory Object Execution Code

The vulnerability of Microsoft Office packages, Office Online Server, Office Web Apps Server, Office Word Viewer, SharePoint Enterprise Server, SharePoint Server, Word, and Office 365 exists due to errors in memory object handling. Exploiting this vulnerability can allow a malicious actor to...

Windows Data Sharing Service Privilege Escalation

The vulnerability of the Windows Data Sharing Service in the Windows operating system is related to file handling errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Cisco Prime License Manager SQL Injection

The vulnerability in the Cisco Prime License Manager’s web infrastructure is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

Wizard Component RICOH MP C6003 Data Compromise

The vulnerability of the Wizard /web/entry/en/address/adrsSetUserWizard.cgi component of the RICOH MP multifunctional device exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to compromise the...

Oracle VM VirtualBox Full Control

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

Zip4j extractDir Code Execution

The vulnerability of the extractDir function in the Zip4j library, which is used for working with zip files, is related to an incorrect limitation on the path name of the directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code using a...