Action Controller DoS

The vulnerability of the Action Controller component of the Action Pack interpreter in Ruby is related to the use of a regular expression with high computational complexity. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

Portal for ArcGIS Open Redirection

The vulnerability of the Portal for ArcGIS web portal is related to the use of open redirection. Exploiting this vulnerability allows a malicious actor to redirect users to any given URL address...

Platypus.js Path Traversal Confidential Data

The vulnerability of the Platypus.js tooling platform is related to an incorrect restriction on the path name to the restricted-access catalog. Allowing this to be exploited could enable a malicious actor to gain access to confidential data...

MiCollab Audio Web Video Conferencing Unauthorized Access

The vulnerability of the Audio, Web, and Video Conferencing component of the MiCollab collaboration platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to read, modify, or delete data...

Remote Access SSL VPN DoS

The vulnerability of the Remote Access SSL VPN function in microprogramming-based network interface devices of Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to the absence of resource release after the expiration of its validity period. Exploiting this...

Nginx UI Directory Read Arbitrary Files

The vulnerability of the configuration settings in the directory /api/configs of the Nginx UI server’s user interface is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to read arbitrary files...

Cisco Adaptive Security Appliances Pointer Arithmetic DoS

The vulnerability of Microprogramming Software in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to pointer arithmetic errors. Exploiting this vulnerability can allow attackers to cause service failures...

Cisco NSG Function Bypass

The vulnerability of the NSG function of Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense microprogramming firewalls involves bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and allo...

Advantech ADAM-5630 Authentication Bypass Command Injection

The vulnerability of the microprogrammed logic controller PLC Advantech ADAM-5630 software is related to the absence of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands and cause malfunctions in the system...

Hyper-V Hardware Virtualization DoS

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to improper checking of the return value of a function. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

SAP NetWeaver AS ABAP Authentication Bypass

Vulnerabilities of SAP NetWeaver AS ABAP, SAP NetWeaver AS for Java, SAP Content Server, and SAP Web Dispatcher programming integration platforms are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality,...

Juniper Networks Routing Protocol Demon DoS

The vulnerability of the routing protocol demon, rpd, in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient handling of exceptional states. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted...

Omnibox XSS

The vulnerability of the Omnibox address bars in Google Chrome and Microsoft Edge is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Windows Mobile Broadband Driver DoS

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems is related to pointer assignment errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Microsoft ActiveX Object Model Code Execution

The vulnerability of the Microsoft ActiveX object model in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Cisco IOS XE DoS

The vulnerability of the Protocol Independent Multicast PIM protocol implementation in the Cisco IOS XE operating system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Drupal Core Authorize Disclosure

The vulnerability of the /core/authorize.php file in the Drupal CMS system relates to the exposure of system data by unauthorized individuals in the controlled area. Exploiting this vulnerability could allow attackers to disclose protected information through the hashsalt parameter in the...

Google Chrome User Interface Replacement

The vulnerability of Google Chrome’s user interface is related to errors in the way information is presented on the user interface. Exploiting this vulnerability can allow a malicious actor to replace the user interface with a specially created HTML page...

WebRTC Component Google Chrome Confidential Data Access

The vulnerability of the WebRTC component in the Google Chrome web browser is related to memory corruption beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access sensitive data, compromise its integrity, and cause service interruptions...

WebRTC Component Google Chrome Confidential Data Access

The vulnerability of the WebRTC component in the Google Chrome web browser is related to memory corruption beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access sensitive data, compromise its integrity, and cause service interruptions...

Linux kernel io_uring Poll DoS

The vulnerability of the iouring/poll component in the Linux operating system’s kernel is related to the state of the race condition during multi-address request operations. Exploiting this vulnerability can allow an attacker to cause a service failure...

Skia Graphic Library Information Disclosure

The vulnerability of the Skia graphic library in Microsoft Edge and Google Chrome is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to disclose sensitive information or compromise data integrity through a specially crafted HTML page...

sof-nau8825 Linux DoS

The vulnerability of the sof-nau8825 component in the Linux operating system is related to an overflow in the length of a pseudonym. Exploiting this vulnerability can allow an attacker to cause a service failure...

PDF-XChange Editor Heap Buffer Overflow

The vulnerability of PDF-XChange Editor, a program for viewing and editing PDF documents, is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created XPS file...

Webmin sysinfo.cgi Arbitrary Script Execution

The vulnerability in the sysinfo.cgi script of the Webmin hosting panel exists because measures are not taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary scripts remotely...

Microsoft Office Code Execution

The vulnerabilities of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft Project management software are related to errors in processing input data. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code, provided that the user opens a...

Juniper Networks PPMD DoS

The vulnerability of PPMD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to memory release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

ManageEngine Exchange Reporter Plus SQL Injection

The vulnerability of the Reports module in the ManageEngine Exchange Reporter Plus software for monitoring, analysis, and report generation is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL...

pimcore Statistics Module Unauthenticated Access

The vulnerability of the statistics module /admin/index/statistics in the Admin Classic Bundle administrative interface of the PHP pimcore software platform is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gai...

Microsoft Edge Code Execution

The vulnerability of the built-in Microsoft Edge browser on Microsoft Windows operating systems is related to data type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, provided that the user accesses a specially crafted URL...

MySQL InnoDB DoS

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL protocol...

FortiOS IP Address Checking Bypass

The vulnerability of the IP address checking function in FortiOS operating systems and FortiProxy proxy servers for protecting against Internet attacks is related to the improper handling of numerical parameters based on different criteria. Exploiting this vulnerability allows a malicious actor t...

LabVIEW tdcore_24_1.dll Unauthenticated RCE

The vulnerability of the tdcore241.dll library in the LabVIEW programming environment is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or execute arbitrary code using a...

Cisco Webex Teams File Protocol Handler Disclosure

The vulnerability of the File Protocol Handler component in Cisco Webex Meetings and Teams software lies in the lack of protection for sensitive data. Exploiting this vulnerability allows a malicious actor to disclose confidential information through a specially crafted link...

Zoom Video Conferencing DoS

The vulnerability of Zoom, a video conferencing software, is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to cause service failures...

RubyGems.org Uncontrolled Resource Consumption DoS

The vulnerability of the RubyGems.org repository for programming languages involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

SGI Image development platform’s Code Execution

The vulnerability of the SGI Image development platform’s QNX SDP code base is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures by loading specially crafted SGI files remotely...

Ruijie RG-UAC Router Arbitrary Command Execution

The vulnerability of the file /view/systemConfig/reboot/rebootcommit.php in the Ruijie RG-UAC router microprogramming system exists due to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to...

Fortinet FGFMD Code Execution

The vulnerability of Fortinet’s FGFMD software products is related to a violation of the buffer’s initial limit. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code by sending specially crafted packets...

FortiOS Command Line Interpreter Buffer Overflow RCE

The vulnerability of FortiOS command-line interpreter is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by introducing specially crafted command-line arguments...

Ivanti Connect Secure Policy Secure CRLF Injection Code Execution

The vulnerability of Ivanti Connect Secure previously known as Pulse Connect Secure and Ivanti Policy Secure lies in the lack of measures to neutralize CRLF sequences. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted data containing the CRLF...

LenelS2 NetBox Access Control Command Execution

The vulnerability of the LenelS2 NetBox access control and event monitoring system is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Oracle MySQL Server Thread Pooling DoS

The vulnerability of the Server:Thread Pooling component of the Oracle MySQL Server database management system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Ruijie RG-UAC Router Command Execution

The vulnerability of the /view/systemConfig/sysuser/usercommit.php file in the Ruijie RG-UAC network management tool exists due to the failure to eliminate special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...

LG WebOS Service Arbitrary Command Execution

The vulnerability of the service com.webos.service.connectionmanager/tv/setVlanStaticAddress in the LG WebOS operating system exists because measures to neutralize the special elements used in the operating system commands have not been taken. Exploiting this vulnerability allows a malicious acto...

rndismp6.sys Code Execution

The vulnerability of the rndismp6.sys driver in Windows operating systems is related to insufficient input validation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Pandora FMS Command Injection

The vulnerability of the Pandora FMS monitoring and management system lies in the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the server remotely...

Parasolid 3D Geometric Modeling Tool Zero Pointer Swap DoS

The vulnerability of Parasolid’s 3D geometric modeling tool is related to the manipulation of the zero pointer. Exploiting this vulnerability can allow attackers to trigger a service failure using specially created XT files...

Pandora FMS Path Traversal

The vulnerability of the Pandora FMS system for monitoring and managing IT environments stems from incorrect restrictions on the path name used to access the restricted catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files into the system and execute arbitrary...

Envoy proxy nghttp2 DoS

The vulnerability of the nghttp2 codec in the Envoy proxy server relates to the implementation of the HTTP/2 protocol. It involves sending an unlimited number of CONTINUATION requests when the maximum header size limit is exceeded, due to the absence of the ENDHEADERS flag. Exploiting this...