92710 matches found
The vulnerability of the E-Staff automation system for recruitment processes is related to errors in data filtering when fields of objects are changed. This allows a perpetrator to execute arbitrary commands.
The vulnerability of the E-Staff recruitment process automation system is related to errors in data filtering when fields of objects are modified. Exploiting this vulnerability allows a malicious actor to bypass security measures and execute arbitrary commands by writing web slugs...
The vulnerability of the ndisc_send_skb() function in the net/ipv6/ndisc.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ndiscsendskb function in the net/ipv6/ndisc.c module of the Linux operating system’s IPv6 kernel implementation is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...
The vulnerability of the __do_sys_perf_event_open() function in the kernel/events/core.c module of the Linux operating system allows a attacker to compromise the integrity of protected information.
The vulnerability of the dosysperfeventopen function in the kernel/events/core.c module of the Linux operating system is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected information...
The vulnerability of the virtual server “1C-Bitrix: Virtual Machine” involves deficiencies in access control, allowing attackers to elevate their privileges to the root level.
The vulnerability of the virtual server “1C-Bitrix: Virtual Machine” is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to elevate their privileges to the root level...
The vulnerability of the nft_payload_set_eval() function in the net/netfilter/nft_payload.c module of the netfilter component of the Linux operating system allows a hacker to induce a service failure.
The vulnerability of the nftpayloadseteval function in the net/netfilter/nftpayload.c module of the netfilter component of the Linux operating system is related to code errors. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of the bt_sock_recvmsg() function in the net/bluetooth/af_bluetooth.c module of the Linux Bluetooth subsystem allows a hacker to cause a service failure.
The vulnerability of the btsockrecvmsg function in the net/bluetooth/afbluetooth.c module of the Linux Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to cause service failures...
The vulnerability of the ntfs3 component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the ntfs3 component in the Linux operating system’s kernel is related to incorrect blocking in the ntfsdhash function in fs/ntfs3/namei.c. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Linux operating system’s serial kernel component, which allows a hacker to trigger a service failure
The vulnerability of the Linux operating system’s serial kernel component is related to improper validation of input data in the function uartshutdown. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the iwl_mvm_mfu_assert_dump_notif() function in the Linux kernel’s Wi-Fi component allows a hacker to trigger a service failure.
The vulnerability of the iwlmvmmfuassertdumpnotif function in the Linux kernel’s Wi-Fi component is related to memory corruption. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the Linux operating system’s FPGA kernel component, which allows a hacker to trigger a service failure
The vulnerability of the Linux operating system’s FPGA kernel component is related to the dereferencing of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ima component in the Linux operating system’s kernel allows a hacker to increase their privileges.
The vulnerability of the ima component in the Linux operating system’s kernel is related to memory corruption. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the PHP Smarty templater, related to improper handling of code generation, allows attackers to execute arbitrary PHP code.
The vulnerability of the PHP Smarty templater is related to improper handling of code generation. Exploiting this vulnerability allows an attacker to execute arbitrary PHP code on the target system...
Vulnerability of components of the Linux operating system’s kernel, net/mlx5e, which allows a hacker to cause a service failure
The vulnerability of the net/mlx5e components in the Linux operating system’s kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the setWiFiScheduleCfg() function in the web/cgi-bin/cstecgi.cgi script of the TOTOLINK X5000R router’s microprogramming software allows a perpetrator to execute arbitrary commands.
The vulnerability of the setWiFiScheduleCfg function in the web/cgi-bin/cstecgi.cgi script of the TOTOLINK X5000R router’s microprogramming system is related to the failure to take measures to neutralize special elements used in the operating system’s processing of the sMinute parameter. Exploiti...
The vulnerability of the paravirt_patch_default() function in the arch/x86/kernel/paravirt.c module on the x86 kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the paravirtpatchdefault function in the arch/x86/kernel/paravirt.c module on the x86 kernel of the Linux operating system is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a perpetrator to compromise the confidentiality, integrity,...
The vulnerability of the qcom_mhi_qrtr_send() function in the net/qrtr/mhi.c module allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information in Qualcomm Linux-based system kernels.
The vulnerability of the qcommhiqtrSend function in the net/qrtr/mhi.c module, which is part of the Qualcomm IPC kernel for the Linux operating system, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the FortiClient for MAC installer allows a perpetrator to execute arbitrary commands.
The vulnerability of the FortiClient for MAC installer is related to improper external management of the file name or path to the /tmp directory. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
The vulnerability of the Mozilla Firefox Focus browser, related to access control errors, allows attackers to bypass existing security restrictions.
The vulnerability of the Mozilla Firefox Focus browser is related to access control errors. Exploiting this vulnerability can allow a remote attacker to bypass existing security restrictions...
The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.
The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the idx_to_offset() function in the tools/power/x86/turbostat/turbostat.c module of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the idxtooffset function in the tools/power/x86/turbostat/turbostat.c module of the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the nested_get_evmcs_page() function in the arch/x86/kvm/vmx/nested.c module of the virtualization subsystem on the Linux operating system’s x86 kernel platform allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the nestedgetevmcspage function in the arch/x86/kvm/vmx/nested.c module of the virtualization subsystem on the Linux operating system’s x86 kernel platform is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment, related to reading beyond the buffer in memory, allows a perpetrator to execute arbitrary code.
The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment related to buffer overflow attacks involves reading data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute...
The vulnerability of the xiic_xfer() function in the drivers/i2c/busses/i2c-xiic.c file of the Linux operating system allows a hacker to gain access to protected information.
The vulnerability of the xiicxfer function in the drivers/i2c/busses/i2c-xiic.c file of the Linux operating system’s kernel is related to security configuration errors. Exploiting this vulnerability could allow an attacker to gain access to protected information...
The vulnerability of the SSL-VPN portal for FortiOS operating systems allows a hacker to induce a service failure.
The vulnerability of the SSL-VPN portal for FortiOS operating systems is related to the assignment of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
The vulnerability of the rtlpciprobe() function in the driver (drivers/char/ipmi/ipmb_dev_int.c) of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the rtlpciprobe function in the driver drivers/char/ipmi/ipmbdevint.c of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the get_parentControl_list_Info() function in the Tenda AC8 router’s microprogramming software allows a hacker to induce a service failure.
The vulnerability of the getparentControllistInfo function in the Tenda AC8 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the urls parameter. Exploiting this vulnerability could allow a remote attacker to cause a servic...
The vulnerability of the platform’s management interface for deploying and managing LoadMaster applications allows a perpetrator to execute arbitrary commands.
The vulnerability of the platform’s management interface for deploying and managing LoadMaster applications is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially created HTTP request...
The vulnerability in the software web interface for controlling power supply units like PowerChute Serial Shutdown allows a intruder to trigger a service failure.
The vulnerability in the software web interface for controlling power supply units like PowerChute Serial Shutdown is related to improper authentication. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure...
The vulnerability of the eeh_pe_bus_get() function (arch/powerpc/kernel/eeh_pe.c) in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the eehpebusget function arch/powerpc/kernel/eehpe.c in the Linux operating system is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the web service for transmitting information through temporary links, Password Pusher, is related to incorrect session duration. This allows attackers to gain unauthorized access and disclose the protected information.
The vulnerability of the web service for transmitting information through temporary links, Password Pusher, is related to incorrect session duration. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access and disclose the protected information...
The vulnerability of the application software interface of the Active Directory Domain Services service on the Windows operating system, which allows a perpetrator to cause a service failure
The vulnerability of the application programming interface of the Active Directory Domain Services service on the Windows operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the Kerberos protocol for Windows operating systems allows a perpetrator to induce a service failure.
The vulnerability of the Kerberos protocol for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability in the `drivers/net/ethernet/broadcom/bnxt/bnxt.c` module of Linux kernel allows a hacker to cause a service failure.
The vulnerability in the drivers/net/ethernet/broadcom/bnxt/bnxt.c module of Linux operating systems is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Web Inspector tool for checking web pages on operating systems like iOS, iPadOS, macOS, and the Safari browser allows attackers to execute arbitrary commands.
The vulnerability of the Web Inspector tool for checking web pages on operating systems like iOS, iPadOS, macOS, and the Safari browser is related to the lack of measures taken at the control level to clean up data. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Kernel component in operating systems such as MacOs, iPadOS, iOS, watchOS, and tvOS allows attackers to elevate their privileges to a root level.
The vulnerability of the Kernel component in macOS, iPadOS, iOS, watchOS, and tvOS is related to permission handling errors. Exploiting this vulnerability can allow an attacker to elevate their privileges to a root level...
The vulnerability of the formSetClientState function in the Tenda AC18 router software allows a attacker to trigger a service failure or execute arbitrary code.
The vulnerability of the formSetClientState function in the Tenda AC18 router software is related to buffer overflows in the stack when processing the limitSpeedUp parameter. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code using a specially...
The vulnerability of the installer for Microsoft Visual Studio allows a hacker to increase their privileges.
The vulnerability of the installer of the Microsoft Visual Studio software is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a perpetrator to enhance their privileges...
The vulnerability of the Windows Win32 Kernel subsystem in operating systems allows attackers to increase their privileges.
The vulnerability of the Windows Win32 Kernel subsystem in operating systems involves the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the CMSimple content management system’s link validation function allows attackers to perform SSRF attacks.
The vulnerability of the CMSimple content management system’s link validation function is related to insufficient protection of operational data. Exploiting this vulnerability could allow a malicious actor to carry out an SSRF attack remotely...
The vulnerability of the ogs_dbi_auth_info() function (lib/dbi/subscription.c), which is used for creating and managing the NR/LTE Open5GS mobile network, allows a perpetrator to cause a service failure.
The vulnerability of the ogsdbiauthinfo function lib/dbi/subscription.c, which is used for creating and managing the NR/LTE Open5GS mobile network, is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the Swift Mailer module in the Drupal CMS system, related to the use of dangerous methods or functions, allows attackers to exploit it.
The vulnerability of the Swift Mailer module in the Drupal CMS system is related to the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor to execute a spear-phishing attack remotely...
The vulnerability of the Minify JS module in Drupal CMS systems, related to the manipulation of cross-site requests, allows attackers to execute CSRF attacks.
The vulnerability of the Minify JS module in Drupal CMS systems is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute a CSRF attack remotely...
The vulnerability in the web interface of the microprogramming software for wireless client bridges from HPE Aruba Networking 501 allows a attacker to execute arbitrary code in the device’s basic operating system.
The vulnerability of the web interface for managing microprogramming software in HPE Aruba Networking 501 wireless client bridges is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the...
The vulnerability of the System component of the Android operating system, allowing a hacker to execute arbitrary code
The vulnerability of the System component of the Android operating system is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability in the web interface of the Cisco Crosswork Network Controller (CNC) allows a attacker to execute XSS attacks.
The vulnerability in the web interface of the Cisco Crosswork Network Controller CNC management interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
The vulnerability of the OpenVPN Connect software lies in the improper deletion of critical data at the boundary; this allows a hacker to increase their privileges.
The vulnerability of the OpenVPN Connect software is related to improper cross-border deletion of critical data. Exploiting this vulnerability can allow a remote attacker to increase their privileges...
The vulnerability of the CI/CD application integration and delivery system provided by JetBrains TeamCity, due to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.
The vulnerability of the CI/CD application integration and delivery system provided by JetBrains TeamCity exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...
The vulnerability of the Adobe Media Encoder application, related to a pointer swapping error, allows a perpetrator to trigger a service failure.
The vulnerability of the Adobe Media Encoder application relates to a pointer assignment error. Exploiting this vulnerability could allow an attacker to trigger a service failure using a specially created malicious file...
The vulnerability of the Advanced Payment Management component of the SAP S/4HANA Finance software allows a perpetrator to enhance their privileges.
The vulnerability of the Advanced Payment Management component of the SAP S/4HANA Finance financial management software is related to authentication breaches. Exploiting this vulnerability can allow attackers who operate remotely to enhance their privileges...