The vulnerability in the Splunk Web interface of the Splunk Enterprise operating system’s operational analysis platform allows a perpetrator to execute arbitrary code and gain increased privileges.

The vulnerability in the Splunk Web interface of the Splunk Enterprise operating system’s operational analysis platform is related to an incorrect initialization of resources when processing the OPENSSLDIR value. Exploiting this vulnerability allows an attacker to execute arbitrary code and gain...

The vulnerability of the SaveUserSetting component in the SolarWinds Orion Platform software monitoring solution allows a hacker to execute arbitrary commands.

The vulnerability of the SaveUserSetting component in the SolarWinds Orion Platform software lies in the improper execution of certain actions. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the macOS operating system’s kernel allows a hacker to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of the macOS operating system’s kernel is related to security configuration errors. Exploiting this vulnerability can allow an attacker to bypass security restrictions and gain unauthorized access to protected information...

The vulnerability of the JBrowse browser, which allows for unlimited downloading of files of a malicious nature, enables attackers to execute arbitrary code.

The vulnerability of the JBrowse browser is related to the unlimited downloading of files of a malicious nature. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the phpcgi_main function in the D-Link DIR-895 router’s microprogramming system allows a hacker to increase their privileges.

The vulnerability of the phpcgimain function in the D-Link DIR-895 router’s microprogramming system is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of the microprogrammed software of Wi-Fi routers ASUS RT-AC86U and RT-AX56U allows a hacker to execute arbitrary code.

The vulnerability of ASUS’ Wi-Fi router software, RT-AC86U and RT-AX56U, is related to the use of uncontrolled format strings. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Bluetooth microprogramming chipset Unisoc, related to the lack of permission checking, allows a intruder to gain unauthorized access to protected information.

The vulnerability of Bluetooth microprogrammed chipset devices from Unisoc lies in the lack of permission checking. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the function com.imc.iview.utils.CUtils.checkSQLInjection() in the system for centralized control of network devices and ports of Advantech iView allows a attacker to execute arbitrary SQL commands.

The vulnerability of the com.imc.iview.utils.CUtils.checkSQLInjection function in the system for managing network devices and ports of Advantech iView is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute...

The vulnerability of the sub_48AC20 function in D-Link DIR-882 A1 wireless router’s microprogramming software allows for the execution of arbitrary code.

The vulnerability of the sub48AC20 function in D-Link DIR-882 A1 wireless router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the ABB eSOMS software for managing production processes allows a hacker to gain unauthorized access to protected information.

The vulnerability of the ABB eSOMS production process management software is related to errors in the Cache-Control and Pragma headers of HTTP responses. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerabilities of D-Link DIR-550A and DIR-604M router microprogramming software allow attackers to enhance their privileges.

The vulnerability of D-Link DIR-550A and DIR-604M router microprogramming software is related to insecure resource initialization. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...

The vulnerability of the SetAccessPointMode.php script in D-Link router microprogramming devices such as DIR-822 Rev.B, DIR-822 Rev.C, DIR-860L Rev.B, DIR-868L Rev.B, DIR-880L Rev.A, and DIR-890L Rev.A allows a hacker to execute arbitrary commands.

The vulnerability of the SetAccessPointMode.php script in D-Link router microprogramming software such as DIR-822 Rev.B, DIR-822 Rev.C, DIR-860L Rev.B, DIR-868L Rev.B, DIR-880L Rev.A, and DIR-890L Rev.A exists due to the failure to take measures to neutralize the special elements used in the...

The vulnerability of the NTLM Security Support Provider implementation in the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the NTLM Security Support Provider in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the Windows operating system’s lock screen allows a hacker to bypass security restrictions.

The vulnerability of the Windows operating system’s lock screen is related to security configuration errors. Exploiting this vulnerability can allow a hacker to bypass security restrictions...

The vulnerability of the GRand Unified Bootloader (GRUB) of the Cisco IOS XR router operating system from Network Convergence System’s 540 Series and Cisco 9000 Series routers allows a hacker to execute arbitrary code.

The vulnerability of the GRand Unified Bootloader GRUB in Cisco IOS XR routers from the Network Convergence System 540 Series and Cisco 9000 Series is related to deficiencies in the authentication process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the HTTP-based client profiling function in Cisco IOS XE allows a hacker to trigger a service failure.

The vulnerability of the HTTP-based client profiling function in Cisco IOS XE exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the IPv4 Virtual Fragmentation Reassembly (VFR) function in Cisco IOS XE allows a attacker to trigger a service failure or cause a device to restart.

The vulnerability of the IPv4 Virtual Fragmentation Reassembly VFR function in Cisco IOS XE operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause a service failure by sending fragmented...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business models RV016, RV042, RV042G, RV082, RV320, and RV325 allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform...

The vulnerability of the blacklistAction() function on the PHP software platform pimcore allows violators to perform cross-site scripting attacks.

The vulnerability of the blacklistAction function in the PHP programming platform pimcore relates to the lack of measures taken to protect the structure of web pages when processing email addresses. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

The vulnerability of Nighthawk WiFi 6 Router’s microprogramming software, related to the manipulation of inter-site requests, allows a hacker to perform a CSRF attack.

The vulnerability of Nighthawk WiFi 6 Router RAX30’s microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a remote attacker to execute a CSRF attack...

The vulnerability of the Video components in Microsoft Edge and Google Chrome browsers allows attackers to trigger service interruptions.

The vulnerability of the Video components in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure by loading a specially created malicious HTML page...

The vulnerability of Dell Container Storage Modules lies in their uncontrolled DLL search path, which allows an attacker to execute arbitrary code.

The vulnerability of the Dell Container Storage Modules relates to an uncontrolled DLL search process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Cisco TelePresence CE and RoomOS software for Cisco Touch 10 devices is related to the absence of a mandatory cryptographic step.

The vulnerability of Cisco TelePresence CE and RoomOS software for Cisco Touch 10 devices is related to the absence of mandatory cryptographic steps. It exists due to insufficient identity verification during the pairing process. Exploiting this vulnerability can allow an attacker operating...

The vulnerability of the password reset mechanism of the Automation Education System Apex-VUZ allows a hacker to obtain the user’s password.

The vulnerability of the user password reset mechanism in the Apex-VUZ automation system is related to the use of the SHA-1 encryption algorithm, which lacks sufficient robustness. Exploiting this vulnerability could allow an attacker operating remotely to obtain the user’s password...

The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.

The vulnerability of Windows operating system kernels is related to insufficient validation of input data during object processing. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Connman connection dispatcher’s WISPR support implementation lies in the use of memory after it is freed. This allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the Connman connection dispatcher’s WISPR support implementation lies in the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

The vulnerability of the websRedirect() function in D-Link DIR-882 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the websRedirect function in D-Link DIR-882 wireless router software is related to buffer overflow vulnerabilities. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Websoft HCM’s automation software for HR processes lies in its uncontrolled resource consumption, which allows attackers to trigger service interruptions.

The vulnerability of Websoft HCM’s automation software for HR processes is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of Websoft HCM’s automation software for HR processes stems from the lack of measures taken to protect the website structure. This allows attackers to carry out XSS attacks.

The vulnerability of Websoft HCM’s HR automation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of open-source development environments for UEFI EDK2, related to deficiencies in authentication procedures, allows attackers to gain access to confidential data.

The vulnerability of open-source development environments for UEFI EDK2 is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

The vulnerability of the Cisco AsyncOS operating system in the Cisco Email Security Appliance (ESA) security system allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco AsyncOS operating system in the Cisco Email Security Appliance ESA security system is related to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by establishing a large number o...

The vulnerability of the SetStaticRouteIPv4Settings() function in the web interface for managing D-Link DIR-1935 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the SetStaticRouteIPv4Settings function in the web interface for managing D-Link DIR-1935 router microprogramming software is related to the failure of the system to properly validate the input data entered by the user when processing the StaticRouteIPv4Data element. Exploiti...

The vulnerability of the Windows Scripting Languages component of the Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Scripting Languages component of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Home Network Administration Protocol (HNAP) implementation in D-Link DIR-1935 router microsoftware allows a hacker to circumvent security restrictions.

The vulnerability of the Home Network Administration Protocol HNAP implementation in D-Link DIR-1935 router microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions remotely...

The vulnerability of the Netlogon Remote Protocol (MS-NRPC) implementation in Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Netlogon Remote Protocol MS-NRPC implementation in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the Microsoft ODBC driver for Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft ODBC driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Windows operating system’s Group Policy Services, related to deficiencies in access control, allows a perpetrator to increase their privileges.

The vulnerability of Group Policy Services in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the FortiClient NAC (fcnacd) operating system allows a perpetrator to execute arbitrary code or cause service interruptions.

The vulnerability of the FortiOS operating system’s FortiClient NAC fcnacd is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by sending a specially crafted request...

The vulnerability of the `include/chart_generator.php` script of the Pandora Console component, a monitoring and management system for IT environments in the Pandora FMS framework. This script allows attackers to bypass security restrictions and execute arbitrary SQL code.

The vulnerability of the include/chartgenerator.php implementation of the Pandora Console component in the Pandora FMS monitoring and management system is related to the lack of measures taken to protect the SQL query structure during the processing of the sessionid parameter. Exploiting this...

The vulnerability of the kernel of microprogramming software in Qualcomm’s embedded chips allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of microprogramming software in embedded Qualcomm chips is related to synchronization errors when using common resources. Exploiting this vulnerability can allow attackers to cause service failures or execute arbitrary code...

The vulnerability of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 allows a hacker to execute arbitrary code.

The vulnerability of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 lies in the copying of buffers without checking the size of the input data during the processing of the rp-pppoe.so file. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the pxa3xx_gcu_write function in the Linux operating system’s kernel allows a hacker to execute arbitrary code.

The vulnerability of the pxa3xxgcuwrite function drivers/video/fbdev/pxa3xx-gcu.c in the Linux kernel is caused by a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the ActiveX control on the SCADA server of Measuresoft ScadaPro Server allows a intruder to execute arbitrary code.

The vulnerability of the ActiveX control in the SCADA server of Measuresoft ScadaPro Server relates to reading data outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Xstream Java library for converting objects to XML or JSON format allows a malicious actor to cause a service failure due to uncontrolled resource consumption.

The vulnerability of the Xstream library for converting objects into XML or JSON format involves an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor to cause service failures remotely...

The vulnerability of the ActiveX control on the SCADA server of Measuresoft ScadaPro Server allows a intruder to execute arbitrary code.

The vulnerability of the ActiveX control in the SCADA server of Measuresoft ScadaPro Server relates to the use of an untrusted indicator. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of YetiFroce CRM’s customer relationship management system, related to the lack of measures taken to protect the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the YetiFroce CRM system for managing customer relationships is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Federated Credential Management component in Microsoft Edge and Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the Federated Credential Management component in Microsoft Edge and Google Chrome is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the httpd module in DD-WRT microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the httpd module in DD-WRT microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted HTTP request...

The vulnerability of ASUS RT-AX88U Wi-Fi router’s microprogramming software, related to the use of uncontrolled format strings, allows a hacker to execute arbitrary code.

The vulnerability of ASUS RT-AX88U Wi-Fi router’s microprogramming software is related to the use of uncontrolled format strings. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the software platform for industrial automation and IoT solutions, Elcomplus SmartICS, is related to inadequate access control mechanisms. This allows a malicious individual to complete any process within the system.

The vulnerability of the software platform for industrial automation and IoT solutions, Elcomplus SmartICS, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to complete any process within the system remotely...