92710 matches found
The vulnerability of the SetAPLanSettings function in the microprogramming software of the D-Link DAP-1325 wireless signal booster allows a intruder to execute arbitrary code.
The vulnerability of the SetAPLanSettings function in the microprogramming software of the D-Link DAP-1325 wireless signal booster is related to the execution of operations outside the buffer in memory when processing XML data. Exploiting this vulnerability allows a remote attacker to execute...
The vulnerability of the microprogramming software of the PHOENIX CONTACT TC ROUTER, TC CLOUD CLIENT, and CLOUD CLIENT arises from the lack of protective measures for the website structure. This allows attackers to carry out cross-site scripting attacks.
The vulnerability of the microprogrammed software of the PHOENIX CONTACT TC ROUTER, TC CLOUD CLIENT, and CLOUD CLIENT exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a...
The vulnerability of Google Chrome’s user tabs allows a hacker to replace the user’s interface.
The vulnerability of Google Chrome’s user tabs is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially created HTML page...
The vulnerability of the ds_compress.cc component in the MariaDB database management system allows a hacker to cause a service failure.
The vulnerability of the dscompress.cc component in the MariaDB database management system arises due to blocking resource errors. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the bt_quickfix function in the Vim text editor allows a hacker to execute arbitrary code.
The vulnerability of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to disclose protected information.
The vulnerability of the DHCP server service for Windows operating systems is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...
The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of Zoom’s video conferencing software, related to the implementation of security features at the client side, allows attackers to gain unauthorized access to protected information.
The vulnerability of Zoom, a video conferencing software, is related to the implementation of security features at the client side. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the SED software “DELO” stems from deficiencies in the authentication process, allowing a perpetrator to intercept the identifier and bypass the authentication mechanism.
The vulnerability of the SED software “DELO” is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to intercept the identifier and bypass the authentication mechanism...
The vulnerability of the Cast component of the Google Chrome browser, which allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Cast component of the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial-of-service attack by loading a specially created web page...
The vulnerability of the Google Chrome browser’s Extensions API allows a perpetrator to gain unauthorized access to local files.
The vulnerability of the Google Chrome browser’s Extensions API is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to local files...
The vulnerability of software for developing and executing applications in the ABAP language of SAP NetWeaver Application Server allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerabilities in software for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and...
The vulnerability of the cloud-based messaging and streaming transmission platform Apache Pulsar, related to authentication deficiencies, allows attackers to gain access to the configuration of the cloud-based platform.
The vulnerability of the cloud-based messaging and streaming communication platform Apache Pulsar is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the configuration of the cloud-based platfo...
The vulnerability of the macOS operating system’s kernel allows a hacker to bypass security restrictions and gain unauthorized access to protected information.
The vulnerability of the macOS operating system’s kernel is related to security configuration errors. Exploiting this vulnerability can allow an attacker to bypass security restrictions and gain unauthorized access to protected information...
The vulnerability of CODESYS software products, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.
The vulnerability of CODESYS software products is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
The vulnerability of the kernel of operating systems such as MacOS, iOS, tvOS, iPadOS, and watchOS allows attackers to execute arbitrary code with kernel privileges.
The vulnerability in the kernels of operating systems such as MacOS, iOS, tvOS, iPadOS, and watchOS relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code with kernel privileges...
The vulnerability of the web server of the microprogramming software for SIMATIC MV540, MV550, and MV560 barcode readers allows a perpetrator to cause a service failure.
The vulnerability of the web server of the microprogramming software for SIMATIC MV540, MV550, and MV560 barcode readers is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the drm_mode_setcrtc() function in the drivers/gpu/drm/drm_crtc.c file of the DRM driver for the Astra Linux Special Edition operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.
The vulnerability of the drmmodesetcrtc function in the drivers/gpu/drm/drmcrtc.c file of the DRM driver for the Astra Linux Special Edition operating system is related to access and manipulation of dynamically allocated uninitialized memory. Exploiting this vulnerability could allow an attacker ...
The vulnerability of the WebRTC technology implementation in Google Chrome allows a hacker to execute arbitrary code.
The vulnerability of the WebRTC technology implementation in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to trigger a service failure or execute arbitrary code.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to access to resources through incompatible types. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code using a specially crafted HTML page...
The vulnerability of the GetDeviceSettings function in the application software interface of D-Link DIR-2150 router software allows a hacker to execute arbitrary code.
The vulnerability of the GetDeviceSettings function in the application software interface of D-Link DIR-2150 router microprogramming devices is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using specially...
The vulnerability of Juniper Networks’ Junos OS Evolved operating system, related to deficiencies in authentication procedures, allows attackers to execute arbitrary commands.
The vulnerability of Juniper Networks’ Junos OS Evolved operating system is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary commands using the sysmanctl command...
The vulnerability of the SetTriggerPPPoEValidate function in the application software interface of D-Link DIR-2150 router microprogramming system allows a hacker to execute arbitrary code.
The vulnerability of the SetTriggerPPPoEValidate function in the application software interface of D-Link DIR-2150 router microprogramming devices is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially...
The vulnerability of the Red Hat Enterprise Linux operating system, related to access control deficiencies, allows a intruder to gain unauthorized access to limited functions.
The vulnerability of the Red Hat Enterprise Linux operating system is related to lack of access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to limited functions...
The vulnerability of microprogrammed software in network devices such as Zyxel ZyWALL/USG, VPN, USG FLEX, ATP allows a perpetrator to execute arbitrary commands.
The vulnerability of Zyxel ZyWALL/USG, VPN, USG FLEX, and ATP network devices exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of the ksmbd module in Linux operating systems allows a hacker to execute arbitrary code.
The vulnerability of the ksmbd module in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using the SMB2SESSIONSETUP command...
The vulnerability of the NTLM Security Support Provider implementation in the Windows operating system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the NTLM Security Support Provider in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the PDF-XChange PDF document viewing and editing program lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of the PDF document viewing and editing software PDF-XChange lies in the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created TIFF file...
The vulnerability of Google Chrome’s browser history allows a hacker to execute arbitrary code.
The vulnerability of Google Chrome’s browser is caused by an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...
The vulnerability in the web interface for managing microprogramming software used in IPTV and VoD services, NetUP IPTV Combine, allows attackers to bypass security restrictions and gain increased privileges.
The vulnerability in the web-based administration interface of microprogramming software for IPTV and VoD services, NetUP IPTV Combine, is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain increase...
The vulnerability of the audit log management mechanism of the Secure Access Management System IED Siemens RUGGEDCOM CROSSBOW allows a perpetrator to execute arbitrary SQL queries.
The vulnerability of the audit log management mechanism of the Secure Access Management System for IED Siemens RUGGEDCOM CROSSBOW is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL...
The vulnerability of the NGINX software configuration, which manages the Discourse mailing list, allows a hacker to cause a service failure.
The vulnerability of the NGINX software-based Discourse mailing list management system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of the MKLogic-500 PLI configuration protocol, due to deficiencies in the encryption algorithm, allows attackers to decrypt the configuration protocol and modify the device’s configuration.
The vulnerability of the MKLogic-500 PLB protocol lies in the transmission of information sufficient to recover encryption keys in an open form. Exploiting this vulnerability allows a malicious actor to decrypt the PLB protocol and modify the device’s configuration...
The vulnerability in the web-based interface for controlling programmable logic controllers WAGO PFC100/PFC200, CC100, Edge Controller, and sensor panels WAGO Touch Panel 600 allows a intruder to execute arbitrary code.
The vulnerability of the web-based interface for controlling WAGO PFC100/PFC200, CC100, Edge Controller, and WAGO Touch Panel 600 programmable logic controllers is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker operating...
The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to execute cross-site scripting attacks.
The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created malware file or a specially crafted...
The vulnerability of the kernel (NTOSKRNL) of Microsoft Windows operating systems, which allows a perpetrator to increase their privileges
The vulnerability of the kernel NTOSKRNL of Microsoft Windows is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Internet Storage Name Service (iSNS) for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Internet Storage Name Service iSNS for Windows operating systems is related to insufficient protection of service data due to operations going beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...
The vulnerability of the delivery interface component in NetScaler SD-WAN and Citrix SD-WAN software management tools allows attackers to enhance their privileges.
The vulnerability of the delivery interface component in NetScaler SD-WAN and Citrix SD-WAN software management tools is related to insufficient cleaning of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...
The vulnerability of the Cisco IOS ROM Monitor, related to the leakage of file and directory information, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the Cisco IOS ROM Monitor is related to the leakage of information about files and directories. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of Dell Container Storage Modules lies in their uncontrolled DLL search path, which allows an attacker to execute arbitrary code.
The vulnerability of the Dell Container Storage Modules relates to an uncontrolled DLL search process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the SICAM TOOLBOX II engineering software lies in the insufficient protection of the data transfer control protocol, allowing attackers to bypass access controls in the database service.
The vulnerability of the SICAM TOOLBOX II engineering software is related to insufficient protection of the data transfer control protocol. Exploiting this vulnerability can allow a malicious actor to gain access to the database using the 1522 TCP port...
The vulnerability of the ExploreIT website content management system, related to the lack of measures to protect the SQL query structure, allows attackers to perform cross-site scripting attacks.
The vulnerability of the ExploreIT website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability in the implementation of the GOT Mobile function in the software for graphic control panels from Mitsubishi Electric’s GOT2000 series, models GT27 and GT25, as well as the HMI platform GT SoftGOT2000, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the GOT Mobile function implementation in Mitsubishi Electric’s GOT2000 series graphic control panels, models GT27 and GT25, as well as the HMI platform GT SoftGOT2000, involves bypassing authentication through spoofing. Exploiting this vulnerability can allow unauthorized...
The vulnerability of the Apex-VUZ education automation system, related to the use of strictly encrypted user data, allows a perpetrator to gain full access to the software environment.
The vulnerability of the Apex-VUZ education automation system is related to the use of strictly encrypted user data. Exploiting this vulnerability could allow a malicious actor to gain full access to the software environment...
The vulnerability of the LoginForm and RegisterForm data transmission forms in the Apex-VUZ automation system allows a perpetrator to gain access to user account information.
The vulnerability of the LoginForm and RegisterForm data transmission forms in the Apex-VUZ automation system is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain access to user credentials...
The vulnerability of the message exchange component of the system for loading user files in the Apex-VUZ education automation system allows a perpetrator to upload any files onto the server.
The vulnerability of the message exchange component of the system for loading user files in the Apex-VUZ education automation system is related to the unlimited loading of malicious files. Exploiting this vulnerability allows a remote attacker to load malicious files onto the server...
The vulnerability of the libssh2 library, which implements Git methods in C language using Libgit2, allows a attacker to perform a type of “man-in-the-middle” attack.
The vulnerability of the libssh2 library, which implements Git methods in C using Libgit2, is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...
The vulnerability of the gweb component of the Connection dispatcher, related to writing outside of the allocated memory range, allows a hacker to execute arbitrary code.
The vulnerability of the gweb component of the Connman connection controller is related to writing beyond the boundaries of a reserved memory range. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Aura component in Google Chrome browser allows a hacker to execute arbitrary code.
The vulnerability of the Aura component in Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the Microsoft Outlook email client for the MacOS operating system, related to information representation errors in the user interface, allows attackers to perform spearishing attacks.
The vulnerability of the Microsoft Outlook email client for the MacOS operating system is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using a specially created email message...