95883 matches found
The vulnerability of the Libavcodec library, which is part of multimedia libraries like Ffmpeg, allows a hacker to execute arbitrary code.
The vulnerability of the Libavcodec library, which is part of multimedia libraries like Ffmpeg, exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using a specially crafted QT file...
The vulnerabilities of PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, allow attackers to execute arbitrary code.
The vulnerability of the SaveAs component in PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, is related to the use of memory after it is freed. Exploiting this vulnerability could allow a...
The vulnerability of the httpd module implementation in microprogramming software enhances the capabilities of TP-Link TL-WA850RE V2 and V3 wireless signal amplifiers. This allows attackers to download configuration files.
The vulnerability of the httpd module implementation in microprogramming software for TP-Link’s wireless signal amplifiers TL-WA850RE V2 and V3 is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to download the configuration file remote...
The vulnerability of the Malformed File Handler component in the cross-platform import library for 3D models, Assimp (Open Asset Import Library), allows a hacker to trigger a service failure.
The vulnerability of the Malformed File Handler component in the cross-platform 3D model import library Assimp Open Asset Import Library is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the encryption and digital signature verification library in the Node.js software platform xml-crypto is related to deficiencies in the mechanism for verifying cryptographic signatures. This vulnerability allows attackers to enhance their privileges.
The vulnerability of the XML-crypto library and the digital signature verification mechanism in Node.js software platforms is related to deficiencies in the signature verification mechanism. Exploiting this vulnerability could allow a malicious actor to enhance their privileges by sending special...
The vulnerability of the GGUF_TYPE_ARRAY/GGUF_TYPE_STRING component in the llama.cpp file of the GGUF library allows a attacker to execute arbitrary code.
The vulnerability of the GGUFTYPEARRAY/GGUFTYPESTRING component in the llama.cpp file of the GGUF library is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of cloud-based software for creating and using Nextcloud storage solutions is related to lack of access control measures, allowing attackers to gain unauthorized access to limited functions.
The vulnerability of cloud-based software for creating and using Nextcloud data storage solutions is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to limited functions of the system...
The vulnerability of the 3D CSS component in the Firefox browser, allowing attackers to perform spoofing attacks
The vulnerability of the 3D CSS component in the Firefox browser relates to the display of content outside the viewport of the web page. Exploiting this vulnerability can allow a malicious actor to perform spoofing attacks remotely...
The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird, related to the storage of passwords in unencrypted form, allows attackers to gain unauthorized access to protected information.
The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the storage of passwords in an unencrypted form. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the graphical user input component in the fly-qdm system of the Astra Linux operating system allows a hacker to cause a service failure or execute arbitrary code.
The vulnerability of the graphical user input component in the fly-qdm system of the Astra Linux operating system is related to buffer overflows when copying a command string from the virtual keyboard. Exploiting this vulnerability can allow an attacker to cause service failures or execute...
The vulnerability of the console-based graphic editor ImageMagick, related to integer overflow, allows a hacker to cause a service failure.
The vulnerability of the console-based graphic editor ImageMagick is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of Ruckus Virtual SmartZone’s microprogrammed software controllers, related to authentication procedures that lack sufficient safeguards, allows attackers to circumvent existing security restrictions.
The vulnerability of Ruckus Virtual SmartZone wireless network controller’s microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions remotely...
The vulnerability of the FortiMail email protection system lies in the lack of measures taken to protect the structure of the web page, allowing attackers to execute arbitrary codes.
The vulnerability of the FortiMail email protection system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary codes remotely...
The vulnerability of Moxa NPort asynchronous server’s microprogramming software, related to deficiencies in authentication procedures, allows attackers to execute arbitrary code.
The vulnerability of Moxa NPort asynchronous server microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...
The vulnerability of the Remote Presence subsystem of the microprogramming software used in Lenovo ThinkSystem servers, Lenovo ThinkStation workstations, and Lenovo ThinkEdge industrial computers. This vulnerability allows a attacker to cause a service failure.
The vulnerability of the Remote Presence subsystem of the microprogramming software for Lenovo ThinkSystem servers, Lenovo ThinkStation workstations, Lenovo ThinkEdge industrial computers, and the Lenovo ThinkAgile software/hardware system lies in the fact that the operation data is stored outsid...
The vulnerability of the Flask software’s extension relates to insecure privilege management. This allows attackers to access sensitive data, compromise its integrity, and cause service failures.
The vulnerability of the Flask extension relates to an error in the use of Pickle for serialization. Exploiting this vulnerability can allow a remote attacker to access sensitive data, compromise its integrity, and cause service failures...
The vulnerability of the operating environment of the information protection software “Blockhost-Net” and “Blockhost-Net K” allows a perpetrator to execute the application through the operating system’s regsvr32 component, bypassing the closed-loop programming environment.
The vulnerability of the operating environments of the information protection software “Blockhost-Net” and “Blockhost-Net K” is related to the use of the regsvr32 function to access system components. Exploiting this vulnerability could allow a perpetrator with administrative privileges to execut...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the linux-headers-2.6.18-6-686-bigmem package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the Cyrus IMAP mail server and the OpenSUSE and OpenSUSE Leap operating systems allows attackers to compromise the integrity and accessibility of protected information.
The vulnerability of the indexurlfetch function imap/index.c in the Cyrus IMAP server is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of protected information by using the UrlFetch function and the...
The vulnerability of the Password Manager components in Google Chrome and Microsoft Edge web browsers allows attackers to compromise data integrity.
The vulnerability of the Password Manager component in Google Chrome and Microsoft Edge browsers is related to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker to compromise data integrity remotely...
The vulnerability of the bpf_tail_call_direct_fixup() function in the arch/x86/net/bpf_jit_comp.c module exposes network function support on the Linux kernel-based x86 platform, allowing attackers to cause system failures.
The vulnerability of the bpftailcalldirectfixup function in the arch/x86/net/bpfjitcomp.c module, which supports networking functions on the x86 kernel of the Linux operating system, is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to...
The vulnerability of the Ezviz Internet PT camera’s microprogramming software allows a intruder to gain unauthorized access to the real-time video stream.
The vulnerability of Ezviz Internet PT Camera’s microprogramming software lies in the ability to gain remote access to real-time video streams by creating RTSP packets with specific URL addresses. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to real-time vide...
The vulnerability of the ACEManager component in the microprogramming software ALEOS for Sierra Wireless’ routers allows a attacker to trigger a Denial-of-Service Attack (DoS).
The vulnerability of the ACEManager component in the ALEOS router software from Sierra Wireless relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to trigger a Denial-of-Service attack remotely...
Vulnerability of the PM_io parser function: <PMDEC>::read_face(), set_halfedge() in the Nef_2/PM_io parser component. This is part of the CGAL computational geometry algorithm library, which allows an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the PMioparser function in the Nef2/PMioparser.h component, located in the computational geometry library, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause servi...
The vulnerability of the Apex One antivirus software lies in its improper handling of links before accessing a file, allowing attackers to escalate their privileges.
The vulnerability of the anti-virus software Apex One is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow a hacker to increase their privileges...
The vulnerability of the microprogrammed Ethernet module WISE-4060 and Adam-6050 D lies in the use of weak encryption algorithms, allowing attackers to gain full access to the device with administrator privileges.
The vulnerability of the microprogrammed Ethernet module WISE-4060 and Adam-6050 D lies in the use of weak encryption algorithms. Exploiting this vulnerability can allow an attacker operating remotely to gain full access to the device with administrator privileges...
The vulnerability of the XNU kernel in Apple iOS and Mac OS systems allows attackers to escalate their privileges or execute arbitrary code.
The vulnerability of the XNU kernel in Apple’s iOS and Mac OS systems is related to type conversion errors. Exploiting this vulnerability can allow attackers to enhance their privileges or execute arbitrary code by running a specially created application...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the linux-headers-2.6.18-6-686 package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the DataTransfer component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data.
The vulnerability of the DataTransfer component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
The vulnerability of the Cast component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data and compromise data integrity.
The vulnerability of the Cast component in Google Chrome and Microsoft Edge browsers is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to access sensitive data and compromise data integrity...
The vulnerability of the DevTools set of tools for web development in Google Chrome allows a hacker to bypass existing security restrictions.
The vulnerability of the DevTools suite for web development in the Google Chrome browser is related to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions through a specially created HTML page...
The vulnerability of the Adobe Experience Manager content and media management system, related to the lack of measures taken to protect the website structure, allows a hacker to execute arbitrary JavaScript code within the context of a legitimate user’s session.
The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code within the authorized user’s session...
The vulnerability of the ngx_http_ssl_module module in NGINX Plus and NGINX Open Source web servers allows attackers to compromise the confidentiality and accessibility of protected information.
The vulnerability of the ngxhttpsslmodule module in NGINX Plus and NGINX Open Source web servers is related to the use of memory after deallocation. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality and accessibility of protected information...
The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Kerberos protocol for Windows operating systems lies in the absence of the necessary encryption step. Exploiting this vulnerability can allow a remote attacker to increase their privileges...
The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.
The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerabilities of the BIG-IP Access Policy Manager, as well as the BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager, BIG-IP Orchestrator, allow a perpetrator to access confidential data.
The vulnerabilities of the BIG-IP Access Policy Manager, as well as the BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link...
The vulnerability of the software-hardware complex for protecting information from unauthorized access—“Akord-V”—is related to the violation of established role assignments. This allows an intruder to bypass the access restrictions for resources of the ABI/AVI system for the system administrators and execute arbitrary code on behalf of the system.
The vulnerability of the software-hardware complex for protecting information from unauthorized access, “Akord-V,” is related to the violation of established role assignments. Exploiting this vulnerability allows an intruder to bypass the access restrictions for ARMs of types ABI/AVI for ARM...
The vulnerability of the Contao content management system, related to improper code generation, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Contao content management system is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information by downloading specially created PHP...
The vulnerability of the TrustAccess network firewall lies in its improperly implemented user authentication mechanism, which allows attackers to carry out authentication procedures.
The vulnerability of the TrustAccess network firewall is related to an improperly implemented user authentication mechanism. Exploiting this vulnerability allows a perpetrator who has access to user credentials to perform authentication procedures without using the TrustAccess graphical interface...
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2017 and Adobe Acrobat Reader 2017, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to execut...
The vulnerability of the WBF driver of the HID DigitalPersona U.are.U 4500 fingerprint reader software allows a intruder to gain unauthorized access to protected information.
The vulnerability of the WBF driver of the HID DigitalPersona U.are.U 4500 Reader biometric fingerprint scanner software is related to cryptographic transformation errors. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...
The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system allows a hacker to gain full control over the application.
The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...
The vulnerability of the SDP server for Bluetooth protocol implementations allows a hacker to disclose sensitive system information.
The vulnerability of the SDP-server of the BlueZ software package, which implements a Bluetooth protocol stack, stems from the possibility of reading data beyond the memory buffer boundaries. Exploiting this vulnerability allows a malicious actor to read memory bits by using a specially crafted...
The vulnerability of the Mediaserver application in the Android operating system’s libmpeg2 library allows a hacker to cause memory corruption and execute code remotely within the Mediaserver context.
The vulnerability of the Mediaserver application in the Android operating system’s libmpeg2 library arises from the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause memory corruption and remotely execute code within the...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the fai-kernels package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the Network component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.
The vulnerability of the Network component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...
The vulnerability of the Skia component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.
The vulnerability of the Skia component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...
The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the DHCP server service for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Wondershare Repairit software for repairing damaged files lies in the improper assignment of privileges, which allows attackers to bypass existing security restrictions.
The vulnerability of the Wondershare Repairit software for repairing damaged files is related to improper privilege assignment. Exploiting this vulnerability could allow an attacker to bypass existing security restrictions remotely...
The vulnerability of the rcmail_action_mail_get->run() function in the RoundCube Webmail client allows a hacker to execute XSS attacks.
The vulnerability of the rcmailactionmailget-run function in the RoundCube Webmail client exists because measures to protect the web page structure are not taken. Exploiting this vulnerability allows a malicious actor to perform XSS attacks by sending specially crafted malicious attachments...