Microsoft Excel Code Execution

The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to data type mixing errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

AMD Ryzen AI Integer Overflow

The vulnerability of software for optimizing and deploying AI-based applications related to AMD Ryzen AI is associated with a numerical overflow condition. Exploiting this vulnerability can allow attackers to compromise the integrity and accessibility of protected information...

XWiki Privileged API Access

The vulnerability of the XWiki Platform relates to errors that occur when using privileged application programming interfaces APIs. Exploiting this vulnerability can allow a malicious actor to gain access to read, modify, and delete user accounts...

Apache OpenMeetings Memory Compromise

The vulnerability of Apache OpenMeetings video conferencing software lies in the recovery of unreliable data from memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the vfiopciIoctlGetPCIHotResetInfo function in the drivers/vfio/pci/vfiopciCore.c module of the Linux kernel is related to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to cause a service failure...

nouveau nouveau_gem_new Heap Overflow DoS

Vulnerability of the nouveaugemnew function in the drivers/gpu/drm/nouveau/nouveaugem.c module – The driver that supports Direct Rendering Infrastructure DRI for NVIDIA video cards in the Linux operating system is vulnerable due to the reutilization of previously freed memory. Exploiting this...

Linux kernel I2C STM32F7 Buffer Overflow

The vulnerability of the stm32f7i2cxfer function in the drivers/i2c/busses/i2c-stm32f7.c module of the operating system’s kernel is related to security configuration errors. Exploiting this vulnerability could allow an attacker to gain access to protected information...

Siemens Industrial Edge Management XSS

The vulnerability of the platform for centralized management of industrial peripheral applications and Siemens Industrial Edge Management devices is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site...

Teamcenter Visualization Buffer Overflow Code Execution

The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment related to buffer overflow attacks involves reading data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute...

FortiWeb web applications Network Firewall Bypass Command Execution

The vulnerability of FortiWeb web applications’ network firewalls is related to the improper processing of syntaxically incorrect structures. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary commands by sending specially crafted HTTP/S...

Cisco IOS XR BGP DoS

The vulnerability of the BGP routing protocol implementation in Cisco IOS XR operating systems lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted BGP reques...

PHP HTTP Request Smuggling

The vulnerability of the PHP programming language interpreter is related to deficiencies in the processing of HTTP request headers. Exploiting this vulnerability allows a remote attacker to send hidden HTTP requests a type of HTTP Request Smuggling attack...

Qnap Network Device Authentication Bypass

The vulnerability of the Qnap network device support automation system is related to errors in the authentication process for certificates. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device remotely...

ArcGIS Server XSS

The vulnerability of ArcGIS Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

IObit Uninstaller Heap Buffer Overflow DoS

The vulnerability of the functions 0x8001E000, 0x8001E00C, 0x8001E004, and 0x8001E010 of the system file IURegistryFilter.sys in the IObit Uninstaller uninstaller software is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

phpGACL Template XSS

The vulnerability of the phpgacl/acladmin.tpl template in the PHP library for managing access in web applications is related to the lack of protective measures taken when processing the action template parameters. Exploiting this vulnerability allows a remote attacker to perform cross-site...

SYSMAC FINS Unauthorized Access Command Execution

The vulnerability of the Factory Interface Network Service FINS protocol implemented in SYSMAC programmable logic controllers is related to the absence of authentication. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to sensitive informati...

iio Component DoS

The vulnerability of the iio component in the Linux operating system’s kernel is related to improper validation of input data in the afe4403readraw function. Exploiting this vulnerability can allow an attacker to cause service failures...

SPID.AspNetCore.Authentication Unauthorized Access

The vulnerability of the SPID.AspNetCore.Authentication library in the ASP.NET Core software platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information by sending specially crafted...

D-Link DIR-853 A1 Router DoS

The vulnerability in the prog.cgi script of the SetQuickVPNSettings module of the D-Link DIR-853 A1 router operating system is related to buffer overflow during the processing of the Password parameter. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

Password Pusher Session Duration

The vulnerability of the web service for transmitting information through temporary links, Password Pusher, is related to incorrect session duration. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access and disclose the protected information...

Internet Connection Sharing Windows DoS

The vulnerability of the Internet Connection Sharing ICS function in Windows operating systems is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

D-Link DIR-816A Router Code Execution

The vulnerability of the form2Wan.cgi script in the D-Link DIR-816A2 router software is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTTP POST request...

Internet Connection Sharing Windows DoS

The vulnerability of the Internet Connection Sharing ICS function in Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

macOS Information Disclosure

The vulnerability of macOS operating systems lies in the insecure storage of confidential information. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

i2c Component DoS

The vulnerability of the i2c component in the Linux operating system’s kernel is related to improper locking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

Launch Services macOS Bypass

The vulnerability of the Launch Services interface for macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator to circumvent security restrictions...

Open Social CMS Drupal Authentication Bypass Forced Browsing

The vulnerability of the Open Social CMS system, Drupal, is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute a Forceful Browsing attack...

Swift Mailer Module Drupal XSS

The vulnerability of the Swift Mailer module in the Drupal CMS system is related to the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor to execute a spear-phishing attack remotely...

OpenVPN Connect Privilege Escalation

The vulnerability of the OpenVPN Connect software is related to improper cross-border deletion of critical data. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

Cisco ThousandEyes Endpoint Agent Privilege Escalation

The vulnerability of the software tool for collecting network performance and Cisco ThousandEyes Endpoint Agent application data is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

JetBrains TeamCity XSS

The vulnerability of the CI/CD application integration and delivery system provided by JetBrains TeamCity exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...

SAP S/4HANA Finance Privilege Escalation

The vulnerability of the Advanced Payment Management component of the SAP S/4HANA Finance financial management software is related to authentication breaches. Exploiting this vulnerability can allow attackers who operate remotely to enhance their privileges...

Teamcenter Visualization Buffer Overflow Code Execution

The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment relates to the execution of operations beyond the buffer in memory when processing WRL files. Exploiting this vulnerability can allow an attacker to execu...

Async Http Client RequestBuilder CookieStore Unauthorized Access

The vulnerability of the RequestBuilder class in the CookieStore interface of the asynchronous HTTP request processing library Async Http Client is related to the replacement of cookie files due to incorrect authentication procedures. Exploiting this vulnerability can allow an attacker operating...

Drupal Kernel Code Execution

The vulnerability of the Drupal CMS system’s kernel is related to insufficient control over the modification of dynamically defined object properties. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

OpenSC PKCS15-init Personalization Unauthorized Access

The vulnerability of the pkcs15-init personalization utility for smart cards, a software tool and library for working with smart cards in OpenSC, is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized acce...

Rockwell Automation EtherNet/IP Adapter Input Validation Error

The vulnerability of the microprogramming software for Rockwell Automation’s EtherNet/IP adapters model 5015-AENFTXT is related to input validation errors. Exploiting this vulnerability can allow an attacker to trigger the Error Message Recovery MNRF and cause service failure...

ABB VPNI DoS

The vulnerability of the ABB VPNI function in the S+ Control API of the ABB Symphony Plus S+ Operations, S+ Engineering, and S+ Analyst software for management and monitoring systems is related to errors in processing relative paths. Exploiting this vulnerability can allow attackers to cause...

Foxit PDF Reader Use After Free Information Disclosure

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of memory after it is freed during the processing of Doc objects. Exploiting this vulnerability can allow ...

Tenda AC15 Router Code Execution

The vulnerability of the formSetDeviceName function /goform/SetOnlineDevName in the Tenda AC15 router’s microprogramming software is related to the issue where the operation exits the buffer boundaries in memory when processing the devName parameter. Exploiting this vulnerability could allow a...

Eclipse Mosquitto Buffer Overflow Info Disclosure

The vulnerability of the Eclipse Mosquitto messaging broker is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information...

psi/zfile.c Component Code Execution

The vulnerability of the psi/zfile.c component of the software for processing, transforming, and generating Ghostscript documents is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Windows Telephony Service Code Execution

The vulnerability of the Microsoft Windows operating system’s Telephony Service is related to overflowing buffers in the “heap”. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Action Controller DoS

The vulnerability of the Action Controller component of the Action Pack interpreter in Ruby is related to the use of a regular expression with high computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

Portal for ArcGIS Open Redirection

The vulnerability of the Portal for ArcGIS web portal is related to the use of open redirection. Exploiting this vulnerability allows a malicious actor to redirect users to any given URL address...

Platypus.js Path Traversal Confidential Data

The vulnerability of the Platypus.js tooling platform is related to an incorrect restriction on the path name to the restricted-access catalog. Allowing this to be exploited could enable a malicious actor to gain access to confidential data...

MiCollab Audio Web Video Conferencing Unauthorized Access

The vulnerability of the Audio, Web, and Video Conferencing component of the MiCollab collaboration platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to read, modify, or delete data...

Remote Access SSL VPN DoS

The vulnerability of the Remote Access SSL VPN function in microprogramming-based network interface devices of Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to the absence of resource release after the expiration of its validity period. Exploiting this...