The vulnerability of the Indexed DB API for browser storage interfaces in Google Chrome and Microsoft Edge allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Indexed DB API for browser-based structured data storage in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code through a specially...

The vulnerability of the Shops module in the NukeViet content management system allows a hacker to execute arbitrary SQL code.

The vulnerability of the Shops module in the NukeViet content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code through the listid parameter in the detail.php script, ...

The vulnerability of the Google Chrome browser’s URL component, related to security configuration errors, allows attackers to compromise data integrity.

The vulnerability of the Google Chrome browser’s URL component is related to insufficient data validation during formatting. Exploiting this vulnerability can allow an attacker to compromise the integrity of data...

The vulnerability of the Apache Traffic Server web server arises from the improper processing of URL fragments, allowing attackers to compromise the integrity of the protected information.

The vulnerability of the Apache Traffic Server web server is related to the improper processing of URL fragments. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

The vulnerability of the Mozilla Thunderbird email client, related to writing beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Mozilla Thunderbird email client is related to writing data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by creating a special web page...

The vulnerability of Cisco IOS XE and Cisco IOS network devices from the Cisco Catalyst 4500 series and Cisco Catalyst 4500-X series lies in their lack of exception handling capabilities. This allows attackers to trigger a system reboot, cause an unexpected termination of an application, or induce a service failure.

The vulnerability of Cisco IOS and Cisco IOS XE software for Cisco Catalyst 4500 and Cisco Catalyst 4500-X network devices is related to exception handling flaws. Exploiting this vulnerability can allow an attacker to trigger a device reboot, a failed termination of the application, or a service...

The vulnerability of the zmq::tcp_read() function in the libzmq library, a library for asynchronous messaging in ZeroMQ, allows a attacker to cause a service failure.

The vulnerability of the zmq::tcpread function in the libzmq library, a library for asynchronous messaging, is related to the failure of write operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Ceph storage system, related to the lack of protective measures for the website structure, allows attackers to compromise the integrity of the data.

The vulnerability of the Ceph storage system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the data...

The vulnerability of the SAP NetWeaver integration platform, related to the lack of measures taken to protect the structure of the web page, allows a hacker to intercept the session of administrators or users of web resources.

The vulnerability of the Ecatt server, a software integration platform for SAP NetWeaver, is related to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor, operating remotely, to intercept the session of...

The vulnerability of the readSampleCountForLineBlock function in software for storing OpenEXR images with wide dynamic range brightness levels, related to integer overflow, allows a malicious actor to cause service interruptions.

The vulnerability of the readSampleCountForLineBlock function in software for storing OpenEXR images with wide dynamic range brightness values is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the HuffmanDecodeImage function in the command-line applications for processing GraphicsMagick image files, related to integer overflow, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the HuffmanDecodeImage function in the command-line applications for processing GraphicsMagick image files is related to a numerical overflow of values. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and caus...

The vulnerability of the fly-fm file manager, related to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of the fly-fm file manager is related to incorrect calculation of MD5 in the program window. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the MinIO object storage server, related to authentication errors, allows attackers to bypass the readOnly policy and compromise the integrity of the protected information.

The vulnerability of the MinIO object storage server is related to authentication errors. Exploiting this vulnerability allows a malicious actor to bypass the readOnly policy and compromise the integrity of the protected information by creating a temporary URL address “mc share upload”...

The vulnerability of the Apache OpenOffice office software, related to errors in processing hypertext links, allows a hacker to execute arbitrary code.

The vulnerability of the Apache OpenOffice office software is related to errors in processing hypertext links. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted link within a document...

The vulnerability of VMware Workspace One’s software products stems from the lack of measures taken to protect the structure of the web page. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of VMware Workspace One’s software products exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of Firefox’s requestPointerLock() and setTimeout() methods allows a intruder to gain unauthorized access to protected information.

The vulnerabilities of the requestPointerLock and setTimeout methods in Firefox browsers stem from synchronization errors when using shared resources. Exploiting these vulnerabilities can allow an attacker to gain unauthorized access to protected information...

The vulnerability of JunOS operating systems’ routers, such as SRX1500, SRX4100, SRX4200, SRX4600, and SRX5000 with SPC2, and SRX5000 with SPC2/SPC3, vSRX, is related to privilege management errors. This vulnerability allows attackers to escalate their privileges.

The vulnerability of JunOS operating systems’ routers, such as SRX1500, SRX4100, SRX4200, SRX4600, and SRX5000 with SPC2, SRX5000 with SPC2/SPC3, and vSRX, is related to privilege management errors. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of Visual Studio Code’s source editor, related to insufficient protection of service data, allows a hacker to execute arbitrary code.

The vulnerability of Visual Studio Code’s source editor is related to insufficient protection for service data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of Intel Graphics Driver drivers relates to the occurrence of operations beyond the buffer boundaries in memory, allowing attackers to exploit their privileges.

The vulnerability of Intel Graphics Drivers’ drivers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Connect workers component of the Apache Kafka messaging broker allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Connect workers component in the Apache Kafka messaging broker is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the Intel PROSet/Wireless WiFi connection utility arises from incomplete cleaning of temporary or auxiliary resources. This allows a malicious actor to disclose protected information or cause service failures.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool exists due to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business models RV016, RV042, RV042G, RV082, RV320, and RV325 allows a hacker to execute arbitrary code.

The vulnerability of the web-based management interfaces for Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to execute arbitrar...

The vulnerability of the Bluetooth service for Windows operating systems allows a perpetrator to increase their privileges and gain unauthorized access to protected information.

The vulnerability of the Bluetooth service for Windows operating systems is related to authentication errors. Exploiting this vulnerability can allow an attacker to increase their privileges and gain unauthorized access to protected information...

The vulnerability in the web interface of the Cisco Unified Communications Manager IM & Presence Service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Cisco Unified Communications Manager IM & Presence Service web interface is related to input validation errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the TrueConf software, related to insufficient requirements for password complexity, allows a hacker to gain access to the user account.

The vulnerability of the TrueConf software is related to insufficient requirements for the complexity of passwords. Exploiting this vulnerability can allow a malicious actor to gain access to user accounts by guessing passwords...

The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude lies in the recording beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the cloud-based application for video digitization, annotation, and Adobe Prelude format conversion involves writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current use...

The vulnerability of the components term.arh and core.arh of the EKRA 200 microprocessor series allows a hacker to access confidential information and create new configuration files.

The vulnerability of the term.arh and core.arh components of the EKRA microprogramming system lies in the presence of pre-installed registration data. Exploiting this vulnerability can allow attackers to access confidential information and create new configuration files...

The vulnerability of the KTS web interface “Mayak,” related to the failure to protect the SQL query structure, allows attackers to execute arbitrary SQL commands.

The vulnerability of the KTS “Lighthouse” web interface is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands using a specially crafted HTTP POST request...

The vulnerability of the var_lldpLocalPortTbl function in the microprogramming software for Moxa EDR-810 allows a hacker to trigger an emergency shutdown of the device.

The vulnerability of the varlldpLocalPortTbl function in the microprogramming software for Moxa EDR-810 is related to character processing errors. Exploiting this vulnerability can allow a malicious actor to trigger an emergency shutdown by sending a specially crafted SNMP request with a negative...

The vulnerability of microprogramming software in server boards, server systems, and Intel computing modules relates to writing beyond the buffer memory boundaries, allowing attackers to exploit their privileges.

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to writing beyond the buffer memory boundaries. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the Windows Error Reporting error reporting service allows a perpetrator to elevate their privileges and gain unauthorized access to protected information.

The vulnerability of the Windows Error Reporting error reporting service in the Windows operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain unauthorized access to protected...

The vulnerability of Windows Network Connections on operating systems allows attackers to increase their privileges.

The vulnerability of Windows Network Connections in operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Sample apps component of the Oracle WebLogic Server application server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Sample apps component of the Oracle WebLogic Server application server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Data Pump component of the Oracle Database Server system allows a hacker to gain full control over the application.

The vulnerability of the Data Pump component of the Oracle Database Server management database system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full control over the application...

The vulnerability of the udhcp component in the UNIX-based BusyBox command-line utilities, related to reading beyond the buffer in memory, allows an intruder to gain unauthorized access to protected information.

The vulnerability of the udhcp component in the UNIX-based BusyBox command-line utilities is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the microprogrammed software of the modular controller for the automation of transformer substations of Schneider Electric Easergy T300 (HU250) – related to uncontrolled resource consumption – allows a intruder to trigger a maintenance failure.

The vulnerability of the microprogrammed control module software for Schneider Electric Easergy T300 HU250 for transformer substations automation involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause malfunctions in the system due ...

The vulnerability of the Media Gateway Control Protocol implementation in microprogrammable network devices from Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to induce service interruptions.

The vulnerability of the Media Gateway Control Protocol implementation in microprogrammed network devices of Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor...

The vulnerability of the GDI component in Windows operating systems, which allows a hacker to execute arbitrary code

The vulnerability of the Graphics Device Interface GDI component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page or...

The vulnerability of Google Chrome’s browser, related to bypassing authentication through spoofing, allows attackers to compromise data integrity.

The vulnerability of Google Chrome relates to bypassing authentication through spamming. Exploiting this vulnerability allows a malicious actor, operating remotely, to compromise data integrity by using a specially created HTML page...

The vulnerability of the Blink web browser component of Google Chrome, related to information leakage during interactions, allows attackers to gain unauthorized access to confidential information.

The vulnerability of the Blink web browser component in Google Chrome is related to information leakage during interactions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to confidential information through a specially created HTML page...

The vulnerability of Google Chrome’s browser, related to insufficient data validation, allows attackers to compromise data integrity.

The vulnerability of Google Chrome is related to insufficient data validation during downloads. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

The vulnerability of Google Chrome, related to the use of memory after it is freed, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome relates to the use of memory after it is freed in media operations. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions through a specially created HTML page...

The vulnerability of the Broadband Edge service in the Junos OS router MX Series allows a attacker to cause a service failure.

The vulnerability of the Broadband Edge service on Junos OS routers of the MX Series exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the SiTex distributed application development platform, related to insufficient verification of access rights, allows a perpetrator to disclose protected information.

The vulnerability of the SiTex distributed application development platform is related to insufficient verification of user access rights to data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose protected information...

The vulnerability of the Live Data component in the Cisco Unified Contact Center Enterprise multimedia and distributed contact center solution allows a attacker to trigger a service failure.

The vulnerability of the Live Data component in the Cisco Unified Contact Center Enterprise multimedia and distributed contact center system is related to errors in processing incoming Live Data traffic. Exploiting this vulnerability can allow an attacker to cause service interruptions using...

Vulnerabilities of RSA BSAFE Micro Edition Suite and Oracle Security Service, Oracle Database Server, Oracle Communications IP Service Activator, and Enterprise Manager Ops Center – software solutions for virtualization management – are related to the use of cryptographic algorithms with vulnerabilities. This allows attackers to recover RSA keys.

The vulnerabilities of the RSA BSAFE Micro Edition Suite and Oracle Security Service, the Oracle Database Server database management system, the Oracle Communications IP Service Activator network software, and the Enterprise Manager Ops Center virtualization management system are related to the u...

The vulnerability in HMI/SCADA Equinox Control Expert, related to the failure to protect the SQL query structure, allows a intruder to gain unauthorized access to protected information.

The vulnerability in HMI/SCADA Equinox Control Expert relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information by sending specially crafted SQL queries to the database...

The vulnerability of the exprListAppendList() function in the SQLite database management system, which allows a hacker to cause a service failure.

The vulnerability of the exprListAppendList function in the SQLite database management system arises from the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the API Framework web server component of Cisco Web Security Appliance (WSA) and the Cisco Content Security Management Appliance (SMA) security management device allows a perpetrator to inject arbitrary HTTP headers into responses.

The vulnerability of the API Framework web server component of Cisco Web Security Appliance WSA and the Cisco Content Security Management Appliance SMA security management device is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a malicious...