98239 matches found
Java Runtime Environment Data Compromise
Vulnerability of the Java Runtime Environment, related to program components. Exploiting this vulnerability allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of data by using the 2D component...
Android Bypass Restrictions
The vulnerability of the server/pm/UserManagerService.java function in the Android Wi-Fi operating system is related to deficiencies in access control. Exploiting this vulnerability allows a local attacker to circumvent restrictions on Wi-Fi configuration changes by using guest access...
Android Privilege Escalation
The vulnerability of NVIDIA’s Android operating system video driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...
Internet Information Services DoS
The Internet Information Services software package contains a vulnerability in the ftpsvc2.dll module, located in the C:\Windows\system32\inetsrv directory. Using this module causes exhaustion of the stack when processing a special command argument “LIST”. This occurs due to a recursive function...
Cisco IOS Unauthorized Access
The vulnerability of the SSHv2 component in Cisco IOS systems is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to a device by manipulating information about known user names and their associated RSA keys...
Safari iOS Access Control Bypass
The vulnerability of the WebKit component in the Safari browser and the iOS operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass access controls by using mechanisms for controlling embedded video content remotely...
Mac OS X Code Execution
The vulnerability of the SceneKit component in the Mac OS X operating system arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted Collada file...
Red Hat Enterprise Linux Data Compromise
The vulnerability of the foomatic-4.0.4 package for the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the libgstreamer0.8-ruby package of the Debian GNU/Linux operating system can be exploited, which may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the hostap-modules-2.4.27-4-686-smp package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the hostap-modules-2.4.27-4-k6 package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Gentoo Linux Information Disclosure
The vulnerability of the liotbr package up to version 3.2.1 of the Gentoo Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the libpango1-ruby package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
OpenSUSE Data Compromise
The multiple vulnerabilities in the xloader package of the OpenSUSE operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
OpenSUSE Data Compromise
The vulnerability of the libgsf-64bit package on the OpenSUSE operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
OpenSUSE Data Compromise
The multiple vulnerabilities in the file-devel package of the OpenSUSE operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Red Hat Enterprise Linux Compromise Protected Information
The vulnerability of the rsyslog-relp-4.6.2 package for the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...
SUSE Linux Enterprise Compromise Protected Information
The kernel-vmipae-debuginfo package of the SUSE Linux Enterprise operating system has multiple vulnerabilities that, if exploited, may lead to a violation of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Data Compromise
The multiple vulnerabilities in the kernel-headers-2.2.19-idepci package of the Debian GNU/Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the hostap-modules-2.4.27-4-686 package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
openSUSE Compromise Protected Information
The openSUSE operating system’s aufs-kmp-debug package contains multiple vulnerabilities that, if exploited, may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Red Hat Enterprise Linux Data Compromise
The vulnerability of the dbus-glib-0.73 package in the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...
Red Hat Enterprise Linux Data Compromise
The multiple vulnerabilities in the tog-pegasus-devel-2.7.0 package for the Red Hat Enterprise Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Red Hat Linux Data Compromise
Multiple vulnerabilities exist in the glibc-2.2.4 package of the Red Hat Linux operating system. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Gentoo Linux Data Compromise
The vulnerability of the imlib2 package up to version 1.4.2-r1 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
Information Disclosure
The vulnerability of the kernel in operating systems such as macOS, iOS, iPadOS, tvOS, watchOS, and visionOS is related to a kernel address leakage. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system’s security measures...
Linux BPF Heap Buffer Overflow DoS
The vulnerability of the btffuncprotocheck function in the kernel/bpf/btf.c module, which is part of the Linux kernel’s BPF support, relates to incorrect checking of the specified data type for input parameters. Exploiting this vulnerability could allow an attacker to trigger a service failure...
Linux ARM 64-bit Kernel Heap Buffer Overflow DoS
The vulnerability of the svesetcommon function in the arch/arm64/kernel/ptrace.c module, which is part of the ARM 64-bit kernel support for the Linux operating system, is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
Google Chrome Microsoft Edge Compromise Protected Information
The vulnerability of the GPU components in Google Chrome and Microsoft Edge is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to compromise the accessibility of protected information through a specially crafted HTML page...
Extensions Component Confidential Data Access
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability could allow an attacker to gain access to confidential data through a specially created HTML page...
Util-linux Use-After-Free DoS
The vulnerability of the Util-linux command-line utility suite relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
libheif copy_image_to Code Execution
The vulnerability of the HeifPixelImage::copyimageto function in the libheif/pixelimage.cc decoder and file format parser is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
PostgreSQL EXTRACT Code Execution
The vulnerability of the EXTRACT function in the PostgreSQL database management system is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
Windows kernel Privilege Escalation
The vulnerability of the Windows Kernel component of the Windows operating system relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Python cryptography Library Data Compromise
The vulnerabilities of the functions pkcs7decryptsmime, pkcs7decryptpem, and pkcs7decryptder in the Python programming language-based cryptography library are related to deficiencies in the error reporting mechanism. Exploiting these vulnerabilities could allow an attacker to influence the...
Windows Terminal Code Execution
The vulnerability of the Windows Terminal emulator for operating systems is related to a numerical overflow issue. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Microsoft Office Buffer Overflow Info Disclosure
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
Active Directory Domain Services Code Execution
The vulnerability of Active Directory Domain Services AD DS on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Lodash Prototype Modification
The vulnerability of the Lodash library is related to uncontrolled changes to the attributes of the object’s prototype. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity and accessibility of the protected information...
ColdFusion Unrestricted File Execution
The vulnerability of the ColdFusion software platform is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ColdFusion Code Execution
The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Lua script interpreter Heap Buffer Overflow DoS
The vulnerability of the checkstackGC function in the Lua script interpreter is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
phpMyFAQ Privilege Escalation
The vulnerability of the editUser and updateUserRights functions in the phpMyFAQ web application is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...
Microsoft Office Excel 365 Apps for Enterprise Code Execution
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Office Buffer Overflow
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Notepad++ isInTrustedDirectory Code Execution
The vulnerability of the isInTrustedDirectory function in the RunDlg.cpp script of the Notepad++ text editor is related to the ambiguity of the path handling. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
node-tmp Package Data Compromise
The vulnerability of the node-tmp package on the Node.js software platform is related to an incorrect limitation on the path name of the directory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality of the protected information...
lib/helpers/shouldBypassProxy.js file in the Security Bypass
The vulnerability of the lib/helpers/shouldBypassProxy.js file in the axios library is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
Rack map_accel_path Unauthorized Access
The vulnerability of the mapaccelpath method in the Ruby programming language-based Rack web server module interface is related to the use of a regular expression, which does not sufficiently restrict the set of allowed values. Exploiting this vulnerability can allow an attacker to gain...
IPX image optimizer Path Traversal
The vulnerability of the IPX image optimizer developed by Sharp and SVGO is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and gain unauthorized access to protected...