92710 matches found
The vulnerability of the bit_read_RC() function in the Dwgbmp Utility component, a library for processing DWG format files in LibreDWG, allows a hacker to cause a service failure.
The vulnerability of the bitreadRC function in the Dwgbmp Utility component, a library for processing DWG format files in the LibreDWG library, is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause service...
The vulnerability of the modular interface between web servers and Rack web applications, related to incorrect path name restrictions for restricted directories, allows attackers to gain unauthorized access to protected information.
The vulnerability of the modular interface between web servers and Rack web applications is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the setcred() function in the operating system kernel of FreeBSD allows a perpetrator to execute arbitrary code, increase their privileges, or cause service failures.
The vulnerability of the setcred function in the operating system kernel of FreeBSD is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code, increase their privileges, or cause service failures...
Уязвимость технологии WebRTC браузера Google Chrome, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании
Уязвимость технологии WebRTC браузера Google Chrome связана с переполнением буфера в динамической памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код или вызвать отказ в обслуживании...
Уязвимость графического процессора браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Уязвимость графического процессора браузеров Google Chrome и Microsoft Edge связана с использованием неинициализированных переменных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации с помощью специально созданн...
The vulnerability of Microsoft Word packages in Microsoft Office and Microsoft 365 Apps for Enterprise, related to the use of files and directories accessible from external parties, allows attackers to disclose sensitive information.
The vulnerability of Microsoft Word packages in Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of files and directories accessible from external parties. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is...
The vulnerability of the Cisco IOS XE operating system’s loader allows a hacker to execute arbitrary code.
The vulnerability of the Cisco IOS XE operating system loader is related to a violation of the initial buffer boundary. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in insufficient validation of requests at the server side. This allows attackers to bypass existing security mechanisms.
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B stems from insufficient validation of requests at the server side. Exploiting this vulnerability allows a malicious actor to bypass existing security...
The vulnerability of the sub_3C434() function (/goform/AdvSetWan) in the Tenda FH451 router’s microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the sub3C434 function /goform/AdvSetWan of the Tenda FH451 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю выполнить произвольный код
Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...
The vulnerability of JetBrains Junie software, related to the lack of measures taken to clean data at the management level, allows a perpetrator to execute arbitrary commands.
The vulnerability of JetBrains Junie software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
The vulnerability of the Mattermost instant messaging application, related to the lack of authentication, allows a malicious user to gain unauthorized access and modify protected information.
The vulnerability of the Mattermost instant messaging application is related to the lack of authentication. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access and modify protected information...
The vulnerability of the Brokering File System (BFS) in Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of the Brokering File System BFS in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the hi846_init_controls() function in the drivers/media/i2c/hi846.c module of the Linux operating system’s multimedia device driver allows a hacker to cause a service failure.
The vulnerability of the hi846initcontrols function in the drivers/media/i2c/hi846.c module of the Linux multimedia device driver relates to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability can allow a perpetrator to cause service failures...
The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server lies in the ability to bypass authentication via a user-controlled key, allowing attackers to compromise the integrity of protected information.
The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server relates to bypassing authentication via a key controlled by the user. Exploiting this vulnerability allows an attacker to potentially compromise the integrity of protected information...
The vulnerability of the find_tosym() function in the scripts/mod/modpost.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the findtosym function in the scripts/mod/modpost.c module of the Linux kernel relates to accessing memory beyond the permissible buffer data size limits. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the Google Chrome browser’s Media component, which allows a hacker to trigger a service failure.
The vulnerability of the Google Chrome browser’s Media component relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...
The vulnerability of the Navigation function in Google Chrome and Microsoft Edge browsers allows attackers to bypass the sandboxing protection mechanisms.
The vulnerability of the Navigation function in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass the sandboxing protection mechanisms...
The vulnerability of the shadow copying subsystem of the Secret Net Studio protection tool is related to resource management errors. Exploiting this vulnerability could allow an attacker to influence the accessibility and integrity of the protected information.
The vulnerability of the shadow copying subsystem of the Secret Net Studio protection tool is related to resource management errors. Exploiting this vulnerability could allow an attacker to influence the accessibility and integrity of the protected information...
The vulnerability of the IndustrialPI Webstatus component of the Pilz IndustrialPI device allows a hacker to gain full control over the device.
The vulnerability of the IndustrialPI Webstatus component of the Pilz IndustrialPI device lies in the lack of a mechanism for converting data types. Exploiting this vulnerability could allow a malicious actor to gain full control over the device from a remote location...
The vulnerability of the tmpserver module in TP-Link Archer AX53 software allows a hacker to execute arbitrary code.
The vulnerability of the tmpserver module in TP-Link Archer AX53 microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...
The vulnerability of the Downloads component in the Google Chrome browser allows a hacker to replace the user interface.
The vulnerability of the Downloads component in the Google Chrome browser is related to errors in information representation by the user interface. Exploiting this vulnerability could allow a malicious actor to replace the user interface with a specially created HTML page...
The vulnerability of the OpenSky flight planning and operational management system, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.
The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure during the processing of the filename parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotel...
The vulnerability of the General component of the scalable framework for creating and deploying applications, which allows a malicious actor to gain unauthorized access to read, update, insert, or delete data.
The vulnerability of the General component of the scalable framework for creating and deploying applications is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read, update, insert, or delete...
The vulnerability of the microprogrammed wireless Wi-Fi router Tenda W30E, related to deficiencies in authentication mechanisms, allows attackers to bypass security restrictions and enhance their privileges.
The vulnerability of the microprogrammed wireless Wi-Fi routers Tenda W30E is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain increased privileges...
The vulnerability of the software for centralized logging, analysis, and storage of logs by Graylog, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.
The vulnerability of the Graylog log collection, analysis, and storage software lies in the deficiencies of the authentication process. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...
The vulnerability of the formSetPPTPUserList() function in the Tenda AC23 router software allows a intruder to trigger a service failure.
The vulnerability of the formSetPPTPUserList function in the Tenda AC23 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the list parameter. Exploiting this vulnerability could allow a malicious actor to cause service...
The vulnerability of the UniFi Access access control system, related to deficiencies in authentication procedures, allows a perpetrator to gain full control over the system.
The vulnerability of the UniFi Access access control system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the system...
The vulnerability of the CMS BuilderEngine system, related to the unlimited uploading of dangerous types of files, allows a hacker to execute remote code.
The vulnerability of the CMS BuilderEngine content management system is related to the unlimited uploading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute malicious code...
The vulnerability of the qed_mcpTraceDump() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the qedmcpTraceDump function in the Linux operating system’s kernel is related to an uncontrolled, exploitable assertion. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of Zoom’s video conferencing software relates to a violation of the buffer initial limit, allowing attackers to elevate their privileges.
The vulnerability of Zoom video conferencing software is related to the exploitation of a buffer overflow vulnerability. Exploiting this vulnerability allows an attacker who operates remotely to increase their privileges...
The vulnerability of the fromSetSysTime() function in Tenda AC6 router software allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the fromSetSysTime function in Tenda AC6 router software stems from the operation that occurs outside the buffer in memory when processing the time parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...
The vulnerability of the /goform/setNAT module in the Tenda F3 wireless router’s microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the /goform/setNAT module in the microprogramming software for Tenda F3 wireless routers lies in the copying of buffers without checking the size of the input data during the processing of the portList parameter. Exploiting this vulnerability allows a remote attacker to execu...
The vulnerability of the virtual learning environment Moodle, related to the provision of confidential information to unauthorized individuals, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the virtual learning environment Moodle is related to insufficient testing of its capabilities. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Service Port FTP-server ProFTPD component, which allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Service Port FTP-server ProFTPD component is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code or cause service failures...
The vulnerability of the Bluetooth Low Energy (BLE) technology of Realtek’s RTL8762E software allows a intruder to trigger a service failure.
The vulnerability of the Bluetooth Low Energy BLE technology of Realtek’s RTL8762E software is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to trigger a service failure...
The vulnerability in the Linux operating system’s TUN network interface kernel allows a hacker to trigger a service failure.
The vulnerability of the TUN network interface in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Lighttpd microprogramming software-based web server TRENDnet TN-200 allows a hacker to disclose protected information.
The vulnerability of the Lighttpd microprogramming software-based network storage server TRENDnet TN-200 is related to the use of a static key neV3rUseMe. Exploiting this vulnerability can allow an attacker to disclose the protected information...
The vulnerability of the software for deploying and executing NVIDIA Triton Inference Server (previously known as TensorRT Inference Server) relates to integer overflow. This vulnerability allows a malicious actor to trigger a service failure.
The vulnerability of the software for deploying and executing NVIDIA Triton Inference Server previously known as TensorRT Inference Server is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the `net_sched` component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the netsched component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability allows an attacker to cause service failures...
The vulnerability of the websAspInit() function in D-Link DIR-513 router microprogramming software allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the websAspInit function /goform/formSetWanPPPoE in the D-Link DIR-513 router microprogramming software is caused by buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...
The vulnerability of the FortiOS operating systems, related to operations beyond the buffer in memory, allows attackers to execute arbitrary code or commands.
The vulnerability of the FortiOS operating systems is related to operations that occur outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or commands by sending specially crafted HTTP requests...
The vulnerability of the Apache Tomcat application server arises from bypassing the authentication process by using an alternative path or channel, allowing attackers to compromise the confidentiality of the protected information.
The vulnerability of the Apache Tomcat application server arises from bypassing authentication procedures by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of the protected information...
The vulnerability of Google Chrome, related to insufficient validation of input data, allows a hacker to execute a spear-phishing attack or cause a service failure.
The vulnerability of Google Chrome relates to insufficient validation of input data during the processing of DOM elements. Exploiting this vulnerability allows a remote attacker to execute a spear-phishing attack or cause a service failure...
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in their dependence on the reverse DNS resolver, which allows a hacker to cause a service failure.
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the dependence of critical operations on the reverse DNS solution. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, related to the disclosure of information, allow attackers to compromise the confidentiality and integrity of protected information.
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the exposure of information. Exploiting these vulnerabilities can allow a malicious actor to compromise the confidentiality and integrity of the protected information...
The vulnerability of Autodesk 3dsMax software for 3D modeling, animation, and visualization lies in the possibility of an operation going beyond the buffer boundaries in memory. This allows a malicious actor to execute arbitrary code or cause system failures.
The vulnerability of the software for 3D modeling, animation, and visualization in Autodesk 3dsMax relates to the execution of operations beyond the buffer boundaries in memory when processing RGB files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause...
The vulnerability of the Permissions control element in the Google Chrome browser allows a hacker to replace the user interface.
The vulnerability of the Permissions control element in Google Chrome is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a remote attacker to replace the user interface...
The vulnerability of the chrome.fileSystem interface in the Google Chrome browser allows a perpetrator to replace the user interface.
The vulnerability of the chrome.fileSystem interface in the Google Chrome browser is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a remote attacker to replace the user’s interface...
The vulnerability in the tmUnblock.cgi script of the wireless router software from Linksys WRT120N allows a intruder to gain unauthorized access to the control web interface.
The vulnerability of the tmUnblock.cgi microprogramming software for wireless routers like Linksys WRT120N is related to buffer overflows in the stack when processing the TMBlockURL parameter. Exploiting this vulnerability allows an attacker to gain unauthorized access to the web-based control...