97848 matches found
xml-crypto Cryptographic Signature Verification Privilege Escalation
The vulnerability of the XML-crypto library and the digital signature verification mechanism in Node.js software platforms is related to deficiencies in the signature verification mechanism. Exploiting this vulnerability could allow a malicious actor to enhance their privileges by sending special...
WebAssembly Micro Runtime Heap Buffer Overflow DoS
The vulnerability of the blocktypegetarity function in the core/iwasm/interpreter/wasm.h file, within the WebAssembly environment for WebAssembly Micro Runtime applications WAMR, involves reading beyond the permitted range of memory. Exploiting this vulnerability could allow a malicious actor to...
Ezviz Internet PT Camera Unauthorized Access
The vulnerability of Ezviz Internet PT Camera’s microprogramming software lies in the ability to gain remote access to real-time video streams by creating RTSP packets with specific URL addresses. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to real-time vide...
Nextcloud Access Control
The vulnerability of cloud-based software for creating and using Nextcloud data storage solutions is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to limited functions of the system...
Flask Extension Privilege Management
The vulnerability of the Flask extension relates to an error in the use of Pickle for serialization. Exploiting this vulnerability can allow a remote attacker to access sensitive data, compromise its integrity, and cause service failures...
Adobe Type Manager Code Execution
The vulnerability of the Adobe Type Manager library in the Windows operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code due to a font processing error in Adobe PostScript Type 1...
Intel Unite Client DoS
The software for Intel Unite Conference Calling has a vulnerability due to insufficient checking of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...
PDF Editing Code Execution
The vulnerability of the SaveAs component in PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, is related to the use of memory after it is freed. Exploiting this vulnerability could allow a...
Cast Component Data Compromise
The vulnerability of the Cast component in Google Chrome and Microsoft Edge browsers is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to access confidential data and compromise data integrity...
File Input Service Chrome Edge UI Replacement
The vulnerability of the File Input service in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to replace the user interface through a created HTML page...
Wondershare Repairit Privilege Bypass
The vulnerability of the Wondershare Repairit software for repairing damaged files is related to improper privilege assignment. Exploiting this vulnerability could allow an attacker to bypass existing security restrictions remotely...
cuobjdump Code Execution
The vulnerability of the cuobjdump software tool for parallel computing on NVIDIA CUDA GPUs involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Assimp Malformed File Handler DoS
The vulnerability of the Malformed File Handler component in the cross-platform 3D model import library Assimp Open Asset Import Library is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...
Xerox WorkCentre 3025 Unauthenticated Access
The vulnerability of the web interface of Xerox WorkCentre 3025 microprogramming software is related to the improper processing of special symbols in input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to account information by sending a specially crafted...
Linux microcode Heap Buffer Overflow DoS
The vulnerability of the loaducodeamdbsp function in the arch/x86/kernel/cpu/microcode/amd.c module of the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Intel Chipset INF Utility Uncontrolled Search Path Privilege Escalation
The vulnerability of the INF-file utility for Intel chipset and circuit boards is related to an uncontrolled search path element. Exploiting this vulnerability can allow a hacker to gain increased privileges...
-based router software File Access Disclosure
The vulnerability of the /etc/shadow file in microprogramming-based router software like LB-LINK lies in the use of strictly encrypted user credentials. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
ACEManager Component DoS
The vulnerability of the ACEManager component in the ALEOS router software from Sierra Wireless relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to trigger a Denial-of-Service attack remotely...
BIG-IP Confidential Data Access
The vulnerabilities of the BIG-IP Access Policy Manager, as well as the BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link...
XNU Kernel Privilege Escalation
The vulnerability of the XNU kernel in Apple’s iOS and Mac OS systems is related to type conversion errors. Exploiting this vulnerability can allow attackers to enhance their privileges or execute arbitrary code by running a specially created application...
MOXA EDR-810 Code Execution
The vulnerability of the myparsecookieifkeyexists function offset 0x1B698 on the web server jffs2-root\fs1\magicP\WebServer\webs of the MOXA EDR-810 industrial router arises due to the lack of checking the size of the data being copied into a buffer of 0x40 bytes. Exploiting this vulnerability...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the linux-headers-2.6.18-6-all package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
vvdecapp reconstructCoeff Memory Use After Free
The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...
Linux MMC/SD/SDIO DoS
The vulnerability of the dwcmshcrk3568setclock function in the drivers/mmc/host/sdhci-of-dwcmshc.c driver for MMC/SD/SDIO cards in the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
RoundCube Webmail XSS
The vulnerability of the rcmailactionmailget-run function in the RoundCube Webmail client exists because measures to protect the web page structure are not taken. Exploiting this vulnerability allows a malicious actor to perform XSS attacks by sending specially crafted malicious attachments...
Thunderbolt Microcontroller Configuration Memory Disclosure
The vulnerability of Thunderbolt device microcontrollers lies in the ability to use configuration parameters for an unauthenticated controller. Exploiting this vulnerability can allow a hacker to gain direct access to the memory of the computing device, which is connected to Thunderbolt devices...
Firefox Error Data Compromise
The vulnerability of Firefox browsers is related to an error in the display of the domain name in the address bar. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...
Google Chrome ServiceWorker Data Compromise
The vulnerability of Google Chrome’s ServiceWorker script is related to a processing error in the Cross-Origin Resource Sharing CORS policy. Exploiting this vulnerability allows an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures...
gtbl document editing Pointer Arithmetic DoS
The vulnerability of the gtbl document editing tool from the groff package is related to errors in pointer manipulation at address 0x0000000000409400. Exploiting this vulnerability could allow an attacker to cause a service failure by passing a specially crafted file as an argument to the command...
Solaris Remote Administration Daemon Partial DoS
The vulnerability of the Remote Administration Daemon component of the Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain read, modify, add, or delete access to data, and cause partial service interruption...
Squid Proxy Heap Buffer Overflow
The vulnerability of the Squid proxy server is related to overflowing buffers in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Codecs Component Confidential Data Access
The vulnerability of the Codecs components in Google Chrome and Microsoft Edge relates to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created video file...
DevTools Security Bypass
The vulnerability of the DevTools suite for web development in the Google Chrome browser is related to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions through a specially created HTML page...
Zangi Private Messenger Man-in-the-Middle
The vulnerability of the Zangi Private Messenger messaging application is related to deficiencies in the mechanism for generating session keys. Exploiting this vulnerability could allow a remote attacker to carry out a “man-in-the-middle” attack...
CGAL Nef_2 PM_io Parser Heap Buffer Overflow DoS
The vulnerability of the PMioparser function in the Nef2/PMioparser.h component, located in the computational geometry library, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause servi...
NetKit-rsh Remote Execution
The vulnerability of the NetKit-rsh remote execution program lies in the fact that it only performs a superficial check on the object’s return value. Exploiting this vulnerability allows an attacker to compromise data integrity and also cause service failures through the malicious rsh server...
Lenovo ThinkSystem Remote Presence DoS
The vulnerability of the Remote Presence subsystem of the microprogramming software for Lenovo ThinkSystem servers, Lenovo ThinkStation workstations, Lenovo ThinkEdge industrial computers, and the Lenovo ThinkAgile software/hardware system lies in the fact that the operation data is stored outsid...
Blockhost-Net OS Exploit
The vulnerability of the operating environments of the information protection software “Blockhost-Net” and “Blockhost-Net K” is related to the use of the regsvr32 function to access system components. Exploiting this vulnerability could allow a perpetrator with administrative privileges to execut...
PDF Memory Use Code Execution
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to execut...
libsndfile Heap Buffer Overflow Info Disclosure
The vulnerability of the d2alawarray function in the SI libsndfile library relates to reading data beyond the permissible buffer size. Exploiting this vulnerability allows a remote attacker to gain access to confidential information or cause service failures...
libparsec-mac-qt5 DoS
The vulnerability of the libparsec-mac-qt5 library for developing graphical applications using Qt5 graphical interfaces on the Astra Linux operating system is related to errors that lead to multiple accesses to the macdb memory area. Exploiting this vulnerability can allow an attacker to cause a...
Libavcodec Code Execution
The vulnerability of the Libavcodec library, which is part of multimedia libraries like Ffmpeg, exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using a specially crafted QT file...
SDP Server Disclosure
The vulnerability of the SDP-server of the BlueZ software package, which implements a Bluetooth protocol stack, stems from the possibility of reading data beyond the memory buffer boundaries. Exploiting this vulnerability allows a malicious actor to read memory bits by using a specially crafted...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the linux-headers-2.6.18-6-686 package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Debian GNU/Linux Remote Compromise Protected Information
The multiple vulnerabilities in the linux-headers-2.6.18-6-686-bigmem package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
CRM Platform Path Traversal DoS
The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...
DataTransfer Component Confidential Data Access
The vulnerability of the DataTransfer component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
Extensions Component Confidential Data Compromise
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability can allow an attacker to gain access to confidential data and influence data integrity through a specially created HTML page...
ImageMagick System Failure
The vulnerability of the console-based graphic editor ImageMagick is related to improper handling of code generation. Exploiting this vulnerability can allow an attacker to trigger a service failure using a malicious file...
Linux kernel driver Heap Buffer Overflow DoS
The vulnerability of the ibnlhandleipresresp function in the drivers/infiniband/core/addr.c module of the Linux operating system’s kernel driver relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...