phpPgAdmin Data Export Command Execution

The vulnerability of the dataexport.php web tool of the phpPgAdmin administration tool for PostgreSQL lies in the lack of security measures for SQL query structures. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

Advantech WebAccess/VPN AjaxFwRulesController XSS

The vulnerability of the AjaxFwRulesController.ajaxDeviceFwRulesAction function in the software for remote monitoring with virtual private network capabilities of Advantech WebAccess/VPN is related to the failure to protect the SQL query structure. Exploiting this vulnerability may allow a...

DSA Kernel Heap Buffer Overflow DoS

The vulnerability of the kszswitchRemove function in the drivers/net/dsa/microchip/kszcommon.c file of the DSA kernel support driver for the Linux operating system is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

Pandoc Format Conversion Disclosure

The vulnerability of the Pandoc format conversion library written in the Haskell programming language is related to the manipulation of requests on the server side. Exploiting this vulnerability allows a malicious actor to disclose protected information using elements...

Zero Trust Network Access Man-in-the-Middle

The vulnerability of the Zero Trust Network Access ZTNA technology for FortiOS operating systems and FortiProxy proxy servers in protecting against internet attacks is related to improper verification of certificate authenticity. Exploiting this vulnerability could allow a malicious actor to carr...

Zoom Buffer Overflow Privilege Escalation

The vulnerability of Zoom video conferencing software is related to the exploitation of a buffer overflow vulnerability. Exploiting this vulnerability allows an attacker who operates remotely to increase their privileges...

Tenda AC9 Router Command Execution

The vulnerability of the formSetSambaConf function in the Tenda AC9 router’s microprogramming software is related to the lack of measures taken to neutralize special elements during the processing of the usb.samba.guest.user parameter. Exploiting this vulnerability allows a remote attacker to...

AMD graphics processor Privilege Escalation

The vulnerability of the SMM microprogramming system software for AMD graphics processors is related to insufficient control over the flow of execution in AmdCpmOemSmm. Exploiting this vulnerability can allow attackers to enhance their privileges...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the csdspctlcacheinitmultipleoffsets function in the Linux operating system’s kernel is related to unlimited resource allocation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Rockwell Automation ControlLogix Ethernet Module RCE

The vulnerability of Rockwell Automation ControlLogix® Ethernet Module web processors is related to the insecure initialization of resources when a specific IP address is used for connecting to the WDB agent. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

NVIDIA Triton Inference Server Numerical Overflow

The vulnerability of the software for deploying and executing NVIDIA Triton Inference Server previously known as TensorRT Inference Server is related to the possibility of numerical overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Linux kernel phy_detach() Buffer Overflow DoS

The vulnerability of the phydetach function in the drivers/net/phy/phydevice.c module of Linux kernels is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Tidal Component Code Execution

The vulnerability of the Tidal component of the Alpine iLX-507 audio system is related to errors in the certificate validation process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Alpine iLX-507 vCard Code Execution

The vulnerability of the vCard component of the Alpine iLX-507 audio system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code under the root user’s context...

Tidal Component Code Execution

The vulnerability of the Tidal component of the Alpine iLX-507 audio system is related to an incorrect restriction on the name path to the restricted-access catalog. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

NVIDIA Virtual GPU Manager RCE

The vulnerability of the NVIDIA Virtual GPU Manager driver stems from a race condition. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, increase their privileges, execute arbitrary code, or cause service failures...

Cast component Google Chrome Unauthorized Access

The vulnerability of the Cast component of the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker who operates remotely to gain unauthorized access to protected information...

SuiteCRM InboundEmail Module Data Compromise

The vulnerability of the InboundEmail module in the SuiteCRM customer relationship management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the...

CFNetwork Privilege Escalation

The vulnerability of the CFNetwork component in operating systems such as macOS, iPadOS, visionOS, iOS, watchOS, and tvOS is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

Adobe Experience Manager Bypass Code Execution

The vulnerability of the Adobe Experience Manager content and media data management system is related to configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions and execute arbitrary code...

Arena Simulation Buffer Overflow

The vulnerability of the Arena Simulation software for modeling and automating discrete events is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to execute arbitrary code or disclose sensitive information...

DDSH CLI Arbitrary Command Execution

The vulnerability of the DDSH CLI interface for Dell EMC Data Domain Operating Systems is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow attackers to execute arbitrary commands...

NVIDIA Graphics Use After Free

The vulnerability of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors’ microprogramming software relates to the use of memory after it is freed. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information, enhance their privileges, execute...

OneDrive macOS Privilege Escalation

The vulnerability of the OneDrive file sharing service for the macOS operating system is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root user level...

TOTOLink T6 Software Code Execution

The vulnerability of the setDiagnosisCfg function in the cstecgi.cgi script of the mesh-system TOTOLink T6 software is related to the issue of the operation exceeding the buffer boundaries in memory when processing the ip parameter. Exploiting this vulnerability allows a remote attacker to execut...

Adobe Substance 3D Viewer Pointer Manipulation DoS

The vulnerability of the Adobe Substance 3D Viewer application for viewing and editing 3D files is related to the handling of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafted malicious file...

1C-Bitrix iblock Code Execution

Vulnerability of the iblock module in the Content Management System CMS of 1C-Bitrix: Website management is related to incorrect code generation. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into any PHP script executed during the creation of new information...

Qt Predictable RNG Authentication Bypass

The vulnerability of the cross-platform software development framework Qt is related to a predictable initial number in the pseudorandom number generator. Exploiting this vulnerability can allow an attacker to bypass authentication...

IBM Cloud DevOps Jenkins Plugin Unauthorized Access

The vulnerability of the IBM Cloud DevOps server’s Jenkins plugin lies in the fact that keys are stored publicly in the config.xml file. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

IP camera software CSRF

The vulnerability of the web interface of IP camera software and digital/netscreen recorders from Avtech relates to the manipulation of cross-site requests. Exploiting this vulnerability allows a remote attacker to execute a CSRF attack...

Belkin F9K1122 Wi-Fi range extender DoS

The vulnerability of the formSetLanguage function /goform/formSetLanguage of the Belkin F9K1122 Wi-Fi range extender software is due to a buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

HarmonyOS PDF Preview DoS

The vulnerability of the PDF Preview module in the HarmonyOS operating system is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

PDF-XChange Editor Memory Use After Free Code Execution

The vulnerability of PDF viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the use of memory after it is freed during file processing for U3D operations. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PDF-XChange Editor Buffer Overflow Information Disclosure

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality is related to the occurrence of operations outside the buffer during the processing of PRC files. Exploiting this vulnerability can allow an attacker to disclose protected information...

Oracle VM VirtualBox Core Heap Buffer Overflow DoS

The vulnerability of the vmsvga3dSurfaceMipBufferSize function in the Core component of the Oracle VM VirtualBox software is related to integer overflow. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service failures...

Linux alloc_preauth_hash Heap Buffer Overflow DoS

The vulnerability of the allocpreauthhash function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

TOTOLINK EX1200T Router BOA DoS

The vulnerability of the built-in boa server /boafrm/formIpv6Setup of the TOTOLINK EX1200T router’s microprogramming software is related to the issue of the operation exceeding the buffer boundaries in memory when processing the submit-url parameter. Exploiting this vulnerability allows a malicio...

GPAC NULL Pointer DoS

The vulnerability of the multimedia platform GPAC is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

mxs-dcp driver Heap Buffer Overflow DoS

Vulnerability of the mxsdcpstartdma function in the drivers/crypto/mxs-dcp.c module – The Linux kernel cryptographic accelerator driver is vulnerable due to the use of an uninitialized resource. Exploiting this vulnerability could allow a hacker to cause a system failure...

Ext4 Heap Buffer Overflow DoS

The vulnerability of the ext4mbinitbackend function in the fs/ext4/mballoc.c module of the Ext4 file system support module in the Linux operating system is related to improper memory release before deleting the last reference „memory leak“. Exploiting this vulnerability could allow an attacker to...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the nvmetdatatransferlen function in the drivers/nvme/target/core.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

TOTOLINK X15 Router Web Server Buffer Overflow

The vulnerability of the built-in web server boa /boafrm/formWlanRedirect of the TOTOLINK X15 router’s microprogramming software is related to the copying of buffers without checking the size of input data during the processing of the redirect-url parameter. Exploiting this vulnerability allows a...

HPE StoreOnce VSA Disclosure

The vulnerability of the getServerPayload method in the HPE StoreOnce VSA storage virtualized environment is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to disclose protected information from ...

Linux j1939_session_deactivate() DoS

The vulnerability of the j1939sessiondeactivate function in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

LlamaIndex get_article_urls() DoS

The vulnerability of the getarticleurls function in the KnowledgeBaseWebReader class of the LlamaIndex framework, which is used for working with large language models, is related to an uncontrolled resource consumption when processing the maxdepth parameter. Exploiting this vulnerability could...

IBM InfoSphere Information Server Unencrypted Storage

The vulnerability of the IBM InfoSphere Information Server software platform lies in the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data...

OneDev Service Data Read Arbitrary Files

The vulnerability of the OneDev collaborative development platform is related to insufficient protection for service data. Exploiting this vulnerability allows a remote attacker to read arbitrary files...

VideoGrace DoS

The vulnerability of VideoGrace video conferencing software is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Mojo Library Code Execution

The vulnerability of the Mojo library for Google Chrome and Microsoft Edge browsers stems from the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Cisco AnyConnect DoS

The vulnerability of the Cisco AnyConnect server and the Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway network devices is related to the use of an uninitialized variable. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...